Red Team Tester – Junior

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Provide support for authorized red team and penetration testing efforts across customer systems, networks, applications, APIs, and cloud environments.

• Execute vulnerability validation and exploitation tasks following established rules of engagement.

• Assist in reconnaissance, enumeration, attack-path analysis, exploitation, and post-exploitation activities.

• Conduct security testing for web applications, networks, APIs, and infrastructure.

• Facilitate testing scenarios that simulate real-world adversary tactics, techniques, and procedures (TTPs).

• Utilize the MITRE ATT&CK framework to classify and document adversary techniques.

• Aid in evaluating security controls and identifying vulnerabilities that may permit unauthorized access or privilege escalation.

• Document testing protocols, evidence, vulnerabilities, attack paths, and outcomes.

• Generate concise technical reports detailing vulnerabilities, associated risks, evidence, and recommended remediation strategies.

• Conduct retesting of identified vulnerabilities post-remediation.

• Stay updated on emerging vulnerabilities, exploits, attack techniques, and defensive technologies.

• Adhere to the customer's rules of engagement, security standards, and testing protocols.

⛳️ Requirements

• 3 to 5 years of relevant work experience in the field.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field, or equivalent relevant experience.

• Possession of an industry-recognized certification; Security+, CEH, eJPT, PNPT, or OSCP preferred.

• Practical cybersecurity experience in penetration testing, vulnerability assessment, security testing, ethical hacking, or similar roles.

• Solid understanding of network protocols, operating systems, web technologies, and prevalent security vulnerabilities.

• Knowledge of penetration testing methodologies and vulnerability exploitation techniques.

• Familiarity with the MITRE ATT&CK framework and common attacker TTPs.

• Experience with tools such as Burp Suite, Nmap, Metasploit, Kali Linux, Wireshark, Nessus/Tenable, BloodHound, or similar offensive security software.

• Comfort working in both Windows and Linux environments.

• Experience with scripting languages like Python, PowerShell, Bash, or similar.

• Exposure to AWS cloud security testing.

• Ability to document technical findings and remediation recommendations clearly.

• Strong analytical, troubleshooting, and communication skills.

• Familiarity with NIST SP 800-115.

• Must be eligible to obtain and maintain a Public Trust clearance.

• U.S. citizenship is required to secure the necessary clearance.

🏝️ Benefits

• A selection of medical plans, ranging from an affordable HSA option to a comprehensive PPO, with significant company contributions.

• Dental and vision insurance for you and your family.

• Company-sponsored life, short-term disability, and long-term disability insurance.

• Optional supplemental life, accident, and critical illness coverage.

• 401(k) retirement plan with company matching.

• Paid time off that increases with years of service.

• Paid federal holidays.

• Reimbursement for certifications.

• Opportunities for professional development.

• Access to Valiant University's training portal.

• Flexible spending accounts.

• Wellness and fitness programs.

• Referral bonuses.

• Fully remote work options.

• Occasional travel to the Washington DC Metro area.

• A quiet, distraction-free remote workspace with reliable internet access.

• Core business hours that align with colleagues and Valiant's clients.