Remote Red Team Penetration Tester

Summary

Join Dark Wolf Solutions as a Red Team Penetration Tester to lead all Red Team Operations, perform qualitative and quantitative risk analysis, and maintain regular contact with teams to manage remediation and advise as required.

Requirements

• 10+ years of experience in Penetration testing, Red Team and Purple Team
• Bachelor of Science in Engineering, Computer Science, Information Technology, or equivalent work experience
• Advanced knowledge in common penetration testing tools (Metasploit, Burp Suite, Cobalt Strike, Empire, KALI Linux etc.)
• Must have a demonstrable understanding of voice and data networks, major operating systems, active directory, cloud technologies
• Must demonstrate knowledge of MITRE s ATT&CK framework, execute and chain TTP s
• Must be able to critically examine an organization and system through the perspective of a threat actor and articulate risk in clear, precise terms
• Ability to optimally code in a scripting language (Python, Bash, PowerShell, Rust, C, C++, Golang, etc.)
• BA/BS degree in Computer Science
• US Citizenship and eligibility to obtain a Secret security clearance

Responsibilities

• Performing both internal and external penetration testing of network infrastructure and applications
• Performing Red Team assessments including physical, social engineering, and network exploitation
• Performing well-controlled vulnerability exploitation/penetration testing on applications, network protocols, and databases
• Demonstrating advanced understanding of business processes, internal control risk management, IT controls, and related standards
• Effectively communicating findings and strategy to stakeholders, including technical staff and executive leadership
• Identifying and evaluating complex business and technology risks, internal controls which mitigate risks, and related opportunities for internal control improvement
• Participating in regular Purple Team exercises and performing adversary simulations to test defense controls
• Assisting with scoping prospective engagements, leading engagements from kickoff through remediation
• Working closely with the Blue Team to test the efficacy of existing alerts and help create new detections
• Creating findings reports and effectively communicating findings to stakeholders
• Contributing to enhancing the team's toolkit
• Writing custom scripts to automate tasks related to finding new vulnerabilities
• Maintaining the playbook to continually improve company penetration testing methodologies and threat modeling

Preferred Qualifications

CRTO, OSCP, other relevant certifications