Mid Red Team Tester

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Develop and implement red team testing scenarios in accordance with established rules of engagement, scope, objectives, and methodologies.

• Perform reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, persistence, and other sanctioned adversarial activities.

• Create attack scenarios and TTPs that align with pertinent threat actors and the MITRE ATT&CK framework.

• Execute security testing across networks, web applications, APIs, identity and access management, and cloud environments.

• Assess vulnerabilities and configuration weaknesses to uncover attack paths that automated scanning may overlook.

• Design or adjust scripts, tools, payloads, and testing methodologies.

• Document processes, evidence, vulnerabilities, attack sequences, risks, and recommendations for remediation.

• Contribute to the development of assessment plans and both preliminary and final reports.

• Engage in purple team activities alongside defensive and SOC personnel.

• Confirm the effectiveness of remediation efforts and perform targeted retesting.

• Offer technical guidance and peer reviews to less experienced testers.

• Act as a technical authority across various assessment projects.

• Keep abreast of adversary techniques, vulnerabilities, exploits, and advancements in offensive security technologies.

⛳️ Requirements

• Minimum of 5 years of experience in the relevant field.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a closely related discipline.

• Senior-level industry certification such as CISSP or an equivalent credential.

• Must be eligible to obtain and sustain a Public Trust clearance.

• U.S. citizenship is required to acquire the necessary clearance.

• Proven experience in penetration testing, red team evaluations, or offensive security analyses.

• Practical experience in testing enterprise networks, applications, APIs, or cloud platforms.

• Understanding of exploitation methods and attack vectors within Windows and Linux environments.

• Familiarity with the MITRE ATT&CK framework and penetration testing methodologies.

• Proficient with tools such as Burp Suite, Nmap, Metasploit, Kali Linux, Wireshark, Nessus/Tenable, BloodHound, or similar utilities.

• Scripting proficiency in languages such as Python, PowerShell, Bash, or others.

• Experience in AWS cloud security testing.

• Additional offensive security certifications like OSCP, PNPT, eJPT, CEH, or Security+ are a plus.

• Ability to translate technical testing outcomes into actionable findings and remediation strategies.

• Knowledge of NIST SP 800-115 is preferred.

🏝️ Benefits

• A variety of medical plans, including HSA and PPO options, supported by company contributions.

• Dental and vision insurance coverage for employees and their families.

• Company-funded life, short-term disability, and long-term disability insurance.

• Optional additional coverage for life, accidents, and critical illnesses.

• 401(k) retirement plan featuring company matching contributions.

• Paid time off that increases with tenure.

• Paid federal holidays.

• Coverage for certifications costs.

• Opportunities for professional development.

• Access to the Valiant University training portal.

• Flexible spending accounts available.

• Wellness and fitness initiatives.

• Referral bonuses.

• Fully remote work environment.