Role: BAS Development Engineer
Location: Remote
Duration: 12+ Month
Role Overview:
The professional will be responsible for planning, executing, and analyzing the results of cyber threat and attack simulations, focusing on controlled environments to validate security controls, identify gaps, and support continuous improvement of the organization's security posture. This role involves close collaboration with offensive and defensive security teams, as well as infrastructure and architecture groups.
Required Technical Knowledge:
- Advanced expertise in ethical hacking.
- Experience in executing and modifying exploits.
- Basic knowledge of reverse engineering.
- Proficiency in Python, C, and Assembly (ASM) programming languages.
- Familiarity with Breach and Attack Simulation (BAS) tools.
Preferred Practical Experience:
- Solid understanding of the MITRE ATT&CK framework.
- Experience in writing and adapting exploits for various scenarios.
- Ability to develop Python scripts to simulate actions and automate offensive tasks.
- Proven experience with the SafeBreach platform is considered a strong differentiator.
Recommended Certifications:
Offensive Security / Ethical Hacking:
- Certified Ethical Hacker (CEH)
- Offensive Security Certified Professional (OSCP)
- eLearnSecurity Certified Professional Penetration Tester (eCPPT)
SANS Institute (Advanced Offensive & Reverse Engineering):
- SANS SEC560: GIAC Penetration Tester (GPEN)
- SANS SEC542: GIAC Web Application Penetration Tester (GWAPT)
- SANS SEC660: GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
- SANS SEC573: GIAC Reverse Engineering Malware (GREM)
Cloud and Security Specializations:
- AWS Certified Security Specialty
- Microsoft Certified: Azure Security Engineer Associate
- Google Professional Cloud Security Engineer
Thanks
Jaydeep Singh Technical Recruiter | Empower Professionals
......................................................................................................................................
Fax: | 100 Franklin Square Drive Suite 104 | Somerset, NJ 08873
Certified NJ and NY Minority Business Enterprise (NMSDC)
Note: We respect your Online Privacy. This is not an unsolicited mail. Under Bills.1618 Title III passed by the 105th U.S. Congress this mail cannot be considered Spam as long as we include Contact information and a method to be removed from our mailing list. If you are not interested in receiving our e-mails then please reply with a "REMOVE" in the subject line and mention all the e-mail addresses to be removed with any e-mail addresses, which might be diverting the e-mails to you. We are sorry for the inconvenience.