Job Description: We are seeking a motivated and detail-oriented individual to join our cybersecurity team as a Red Team Member. In this role, you will assist in conducting security assessments, penetration testing, and vulnerability analyses to identify and mitigate potential security threats. You will work under the guidance of experienced team members, gaining hands-on experience in ethical hacking.
We need limited to candidates who hold one of the following certifications or have a strong Hack the Box rating:
PNPT
CPTS
eCPPT
OSCP
CRTO
CRTP
Key Skills
Penetration Testing: Proficiency in advanced penetration testing methodologies and tools, capable of identifying and exploiting complex vulnerabilities.
Red Team Operations: Experience in conducting full-scope Red Team engagements including elements of evasion, obfuscation, social engineering, and other stealth techniques. Up to simulating advanced persistent threats (APTs).
Scripting and Programming: Strong proficiency in multiple scripting and programming languages.
Networking: Deep understanding of network protocols, firewalls, and advanced network security principles.
Operating Systems: Extensive knowledge of Windows, Linux, and macOS operating systems.
Technical Writing: Ability to produce high-quality technical documentation and reports for technical and executive audiences.
Technical Skills (Necessary):
Proven hands-on experience in ethical hacking and solid IT fundamentals.
Ability to perform live, technical assessments and demonstrate hands-on hacking skills.
Proficiency in writing scripts in multiple scripting and programming languages (e.g., Bash, PowerShell, Python, Ruby, C/C++, Java, .NET, JavaScript).
Strong knowledge and practical experience with Cyber Kill Chain, MITRE ATT&CK frameworks, and OWASP standards.
Key Responsibilities:
Lead and execute simulated cyber-attacks to evaluate the effectiveness of security controls.
Engage in Red Teaming, Purple Team exercises, and some advanced penetration testing, including diverse types (e.g., network, AD, web app, API, cloud, IoT, WiFi, hardware, physical, social engineering, reverse engineering).
Develop and refine testing methodologies and tools in collaboration with the red and blue teams.
Document findings, prepare detailed reports, and present results to stakeholders.
Stay current with the latest security trends, threats, and technology developments.
Participate in team meetings, training sessions, and continuous learning opportunities.
Qualifications:
Bachelor’s or Master’s degree in Computer Science, IT, Cybersecurity, AI, or a related technical field (preferred but not required).
Relevant certifications (one or more): OSCP, OSCE, PNPT, BSCP, etc., or practical hands-on certifications. Alternatively, be ranked at least as “Pro Hacker” on HackTheBox.
One or more intermediate or advanced certifications preferred: OSEP, OSWE, OSED, eWPTXv2, CRTO, etc.
Demonstrated high ethical standards, honesty, and integrity.
Strong analytical skills, critical thinking, and curiosity.
Ability to solve complex problems and identify innovative Information Security solutions.
Experience in mentoring and teaching junior team members.
Attention to detail, consistency, and a high standard of work quality.
Open-mindedness and a growth mindset.
Excellent technical writing and reading comprehension skills.
Strong written and verbal communication in English.
Strong interpersonal skills and the ability to work collaboratively.
Excellent task and time management skills.
