Mid Red Team Tester

Job Description: - Plan and execute red team test scenarios according to approved rules of engagement, scope, objectives, and methodology

• Conduct reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, persistence, and other authorized adversarial activities
• Develop attack scenarios and TTPs aligned with relevant threat actors and MITRE ATT&CK
• Conduct network, web application, API, identity and access, and cloud security testing
• Evaluate vulnerabilities and configuration weaknesses to identify attack paths missed by automated scanning
• Develop or modify scripts, tools, payloads, and testing techniques
• Document procedures, evidence, vulnerabilities, attack chains, risks, and remediation recommendations
• Contribute to assessment plans and preliminary and final reports
• Participate in purple team activities with defensive and SOC personnel
• Validate remediation actions and perform targeted retesting
• Provide technical guidance and peer review to less-experienced testers
• Serve as a technical expert across multiple assessment assignments
• Maintain knowledge of adversary techniques, vulnerabilities, exploits, and offensive security technologies

Requirements: - At least 5 years of experience in the subject area

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related field
• Senior industry professional certification such as CISSP or equivalent
• Must be able to obtain and maintain a Public Trust clearance
• U.S. citizenship required to obtain the necessary clearance
• Experience conducting penetration testing, red team assessments, or offensive security testing
• Hands-on experience testing enterprise networks, applications, APIs, or cloud environments
• Knowledge of exploitation techniques and attack paths across Windows and Linux environments
• Working knowledge of MITRE ATT&CK and penetration testing methodologies
• Experience with Burp Suite, Nmap, Metasploit, Kali Linux, Wireshark, Nessus/Tenable, BloodHound, or comparable tools
• Scripting experience in Python, PowerShell, Bash, or similar languages
• Exposure to AWS cloud security testing
• Additional offensive security certifications such as OSCP, PNPT, eJPT, CEH, or Security+
• Experience translating technical testing results into findings and remediation recommendations
• Familiarity with NIST SP 800-115

Benefits: - Choice of medical plans, including HSA and PPO options, with company contributions

• Dental and vision coverage for employees and families
• Company-paid life, short-term disability, and long-term disability insurance
• Optional supplemental life, accident, and critical illness coverage
• 401(k) retirement plan with company match
• Paid time off increasing with years of service
• Paid federal holidays
• Paid certifications
• Professional development
• Valiant University training portal
• Flexible spending accounts
• Wellness and fitness program
• Referral bonuses
• 100% remote work