Senior Specialist – Offensive Security

Responsibilities

• Perform scoped and open-ended assessments on internal and external facing systems
• Perform threat and vulnerability research to identify new ways of achieving the program’s mission and act as a source for innovation within the cybersecurity industry
• Assist in the sales process with potential or existing clients, and act as a client’s primary program contact for projects delivered by Cyber Advisors’ Offensive Security team
• Develop and implement tools that assist with execution of security assessments, including custom tools and automation
• Work with the customer Blue Team to identify gaps, address findings, and improve breach response

Requirements

• At least 3 years of experience performing network and application security assessments and/or red team engagements.

• Prior experience should include one or more of the following

• Executing application and/or network penetration tests
• Executing Red Team or Offensive Security assessments
• Working collaboratively with a variety of internal and external stakeholders (security consultants, project managers, service managers, development teams, technical SME’s, vendors) to deliver high quality assessments.

• Understanding of and experience with multiple of the following

• Networking fundamentals (all OSI layers, protocols, etc.)
• Windows/Linux/Unix operating systems
• Operating system and software vulnerabilities and exploitation techniques
• Web and mobile application vulnerabilities and exploitation techniques
• Malware packing, obfuscation, persistence, exfiltration techniques
• Security technologies such as Firewalls, IDS/IPS, Web Proxies and DLP among others
• Commercial or open-source offensive security tools for reconnaissance, scanning, exploitation and post-exploitation (e. g. Nmap, Nessus, Metasploit, Burp Suite, etc.)
• Project Management
• Demonstrated team-oriented interpersonal skills, with the ability to interface effectively upper management, IT leadership and technology vendors.
• Ability to collaborate and build positive relationships across multiple stakeholders
• Agile thinking and analysis that leads to win-win and innovative solutions
• Strong written and verbal communication skills.
• Calmness and clarity of thought under pressure and ability to maintain confidentiality.
• Ability to prepare and present project ideas and proposals to senior management
• Willingness to work non-standard hours, if necessary
• Hard Skills
• network security assessments
• application security assessments
• red team engagements
• penetration testing
• offensive security assessments
• vulnerability research
• security assessment tools development
• malware techniques
• exploitation techniques
• networking fundamentals
• Soft Skills
• team-oriented interpersonal skills
• collaboration
• relationship building
• agile thinking
• strong communication skills
• calmness under pressure
• confidentiality
• project presentation
• client interaction
• stakeholder engagement
• Industry Keywords
• cybersecurity
• offensive security
• vulnerability exploitation
• breach response
• security technologies
• OSI layers
• software vulnerabilities
• mobile application vulnerabilities
• reconnaissance tools
• scanning tools
• Tools & Technologies
• Nmap
• Nessus
• Metasploit
• Burp Suite
• Firewalls
• IDS/IPS
• Web Proxies
• DLP
• Linux
• Windows
• #J-18808-Ljbffr