Назад
Company hidden
14 дней назад

Red Team Penetration Tester

Формат работы
onsite
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Red Team Penetration Tester (Cybersecurity): Conducting continuous application and hardware penetration tests for critical systems and infrastructure with an accent on manual vulnerability discovery, offensive cyber operations, and custom security tooling. Focus on developing exploits and automation, mimicking threat behavior, and mentoring engineers through complex assessments.

Location: Dahlgren, VA, US

Company

Federal contractor focused on protecting critical systems and infrastructure through cybersecurity assessments and offensive security capabilities.

What you will do

  • Conduct application and hardware penetration testing to identify real-world vulnerabilities.
  • Deliver continuous cyber assessments across services, applications, and websites.
  • Build and automate custom scripts and tools to improve penetration testing efficiency.
  • Mimic threat behavior, perform exploit development, and identify gaps in security tools and techniques.
  • Develop actionable threat mitigation plans.
  • Mentor and lead engineers through complex penetration tests and vulnerability assessments.

Requirements

  • Must be a US citizen due to government requirements.
  • Must hold an active DoD Top Secret/SCI clearance.
  • Bachelor's degree in cybersecurity, cyber operations, engineering, information technology, computer science, mathematics with a computer science concentration, or an equivalent discipline.
  • DoD 8570.01-M baseline certification in accordance with DFARS 252.239-7001, with a minimum CSSP Auditor certification.
  • OSCP, OSCE, OSEE, or OSWP certification.
  • Seven years of full-time professional experience in penetration testing or offensive cyber operations.

Nice to have

  • Experience with Metasploit, Nmap, Kali Linux, Cobalt Strike, Active Directory, and Linux, Windows, and macOS environments.
  • Programming or scripting experience in at least two languages, such as Python, C++, Java, Rust, Assembly, or C#.
  • Certifications such as CISA, CEH, CySA+, GSNA, CFR, or PenTest+.

Culture & Benefits

  • Hands-on work on high-stakes security challenges involving critical systems and infrastructure.
  • Opportunity to develop technical leadership through mentoring and tooling strategy.
  • Direct-hire position.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →