Contract - Red Team Penetration Tester

Contract Red Team Penetration Tester

Rate: Open

Location: Remote in the following states:

IL, TX, FL, GA, MA, MD, MN, NC, NJ, NY, WI, DC

Qualifications

• Bachelor s degree
• 3 - 8+ Years experience of Penetration testing
• Strong proficiency in Network, Web Application, and Mobile Device security testing
• Demonstrated exploit, payload, and attack framework development experience
• Strong knowledge of EDR detection capabilities such as CrowdStrike/Carbon Black, etc. and associated defense evasion techniques for behavioral based alerting
• Strong proficiency in social engineering and intelligence gathering.
• Strong experience with custom scripting (Python, PowerShell, Bash, etc.) and process automation.
• Strong experience with database security testing (MSSQL, DB2, MySQL, etc.).
• Strong proficiency with common penetration testing tools
• Reverse Engineering capabilities
• Heavy Manual Testing experience
• C2 development and CDEs are highly preferred
• OSCP or GPXN certification highly preferred

Responsibilities

• Conduct various Red Team activities such as: Intelligence Gathering, Network/Operating System/Application Penetration Testing, Web Application Penetration Testing, Mobile Application Testing, Social Engineering, Basic Emissions/Signals Testing, Physical Security Testing, Command and Control (C2) Infrastructure Development, Cyber Defense Evasion Stealth techniques, etc.
• Conduct ad-hoc white-box penetration testing work of company infrastructure that is still currently in Development, or in need of pre-Production penetration testing
• Research and execute Cyber Defense Evasion techniques to help enhance Cyber Defense monitoring/alerting capabilities
• Build Command and Control (C2) infrastructure, and obfuscate the C2 network traffic and payloads to avoid detection by the Cyber Defense team