Note: The job is a remote job and is open to candidates in USA. IOActive, a trusted partner for Global 1000 enterprises, is focused on making the world a safer place through innovative cybersecurity solutions. They are seeking a Senior Security Consultant for their Red Team to perform adversarial emulation, exploit vulnerabilities, and enhance the security posture of clients through comprehensive reporting and technical leadership.
Responsibilities
- Work as part of a team performing Red and Purple Team Campaigns for IOActive clients, both remotely and on-site
- Perform adversarial emulation, assumed breach scenarios, post-exploitation, social engineering, and physical security testing
- Manage project tasks and deadlines on a multi-time-zone team
- Develop unique tools to assist in project goals
- Exploit vulnerabilities found in client’s people, processes, and technology; then clearly communicate complex vulnerabilities to both technical and non-technical client staff
- Create comprehensive technical reports explaining technical and business risk of the vulnerabilities found. This includes actionable recommendations/considerations for the client
- Participate in project conference calls with clients and on business development calls in support of sales activities
- Create and lead technical customer presentations
- Provide technical leadership/mentorship to the consulting team and to our clients on security topics
- Contribute to the security industry through presentations, whitepapers and/or research
Skills
- Experience performing and leading covert red team operations and activities, including performing adversarial emulation, assumed breach scenarios, post-exploitation, social engineering, and physical security testing
- Penetration testing experience in Network, Web applications, Wireless networks, Physical security, and Social engineering
- Experience with C2 and post-exploitation frameworks, including Cobalt Strike, Empire, Metasploit, Throwback, and similar tools
- Understanding and proficiency with some of the following: Python, Ruby, PowerShell, Java, and Shell scripting
- Knowledge and experience with enterprise network/system/application architecture and design including complex environments utilizing Microsoft Windows, Active Directory, and Linux
- Deep understanding on Windows and Linux systems administration and post-exploitation activities on each platform
- Ability to present complex material in a digestible, consumable manner to all levels of management
- Highly experienced with OS, services, and application hardening
- Strong ability to find vulnerabilities and develop proof of concepts
- Ability and desire to travel at least 50% of the time – both nationally and globally
Benefits
- A chance to work with an industry leader in cyber security
- Access to world-class technical teams and research
- A high-energy, collaborative team that values innovation
- Flexibility—work remotely or from the office as needed
- Opportunities for travel
- Competitive compensation and performance-based incentives
Company Overview
Company H1B Sponsorship