Job Summary
We're thrilled to announce an exciting opportunity with our client in the cybersecurity sector, who is seeking a dynamic Red Team Operator! This pivotal role involves leading and executing red team operations and penetration tests for their clients. You will simulate advanced cyber-attacks on client infrastructures, applications, and personnel to identify vulnerabilities and provide actionable recommendations. Our client is looking for a highly innovative thinker with extensive expertise in offensive cybersecurity tactics and a passion for pushing boundaries. If you're ready to make a significant impact in the world of cybersecurity, we want to hear from you!
Primary Duties
- Lead and execute red team operations and penetration tests to identify security weaknesses in clients' networks, systems, and applications.
- Design and implement custom attack scenarios reflecting real-world threats, tailored to each client's unique environment and industry.
- Collaborate with clients to analyze the results of red team activities, delivering clear, actionable insights for improving their security measures.
- Develop and maintain custom tools and scripts to support red team activities.
- Produce comprehensive reports and presentations detailing findings, exploitation techniques, potential impacts of vulnerabilities, and mitigation strategies.
- Work closely with clients to enhance their incident response strategies and security awareness based on insights from red team operations.
- Stay informed about the latest cybersecurity trends, threats, and methodologies to continuously improve testing approaches.
Qualifications
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
- At least 3 years of hands-on experience in cybersecurity roles focused on penetration testing or red team operations.
- Proficiency with penetration testing tools like Metasploit, Burp Suite, and Cobalt Strike, and scripting languages such as Python and PowerShell.
- Deep understanding of network protocols, operating system vulnerabilities, web application security, and cloud security.
- Must have experience in Malware Development.
- Proven track record in conducting successful red team engagements and delivering actionable recommendations.
- Excellent communication and reporting skills, with the ability to effectively engage with both technical and non-technical stakeholders.
- Preferred certifications include OSCP, CEH, GPEN, and GWAPT.