Penetration Tester / Red Team Analyst

BW Cyber is seeking a Penetration Tester / Red Team Analyst based in Raleigh, NC for an onsite role. In this position, you will emulate adversary TTPs to assess and validate the effectiveness of security controls across client environments.

You will plan and execute technical security testing, develop engagement parameters, and deliver clear findings to both technical and executive audiences. The work includes producing detailed reports for IT staff, presenting high-level summaries for stakeholders, and advising on remediation actions to reduce risk.

Responsibilities

• Emulate adversary tactics, techniques, and procedures (TTPs) to validate security controls effectiveness
• Develop rules of engagement and brief clients on findings and mitigation techniques
• Perform technical security assessments of client environments, including infrastructure penetration tests
• Perform technical security assessments of client environments, including vulnerability assessments
• Perform technical security assessments of client environments, including web application tests
• Perform technical security assessments of client environments, including wireless security tests
• Perform technical security assessments of client environments, including social engineering campaigns (phishing, spearphishing, and pretexting)
• Perform technical security assessments of client environments, including public cloud hygiene reviews
• Develop rules of engagement, and configure, tune, and operate industry standard assessment tools
• Coordinate, schedule, and support security testing requests
• Evaluate findings to determine applicability, saturation, and potential impact
• Analyze results and produce reports for clients
• Create detailed technical reports for IT staff
• Deliver high-level summary presentations for executives
• Advise client stakeholders of findings and provide remediation guidance
• As appropriate, monitor remediation efforts of findings and communicate progress to stakeholders
• As appropriate, work with client stakeholders to develop Plan of Action & Milestones (POA&M) tracker to ensure identified weaknesses are addressed in a timely and cost-effective manner
• As needed, assist in cyber incident response for clients

Requirements

• Expertise creating exploits for vulnerabilities or demonstrated expertise using a scripting language such as PowerShell, Python, Ruby, or Perl for penetration testing or incident response
• Expert in common vulnerability scanners, e.g. Nessus, OpenVAS, Qualys
• Expert in common penetration testing tools, e.g. Metasploit, Burp, ZAP
• Bachelor's degree or higher
• 3-5 years of experience in penetration testing or incident response
• One of the following active certifications: GXPN, OSCE, OSCP, OSEE, or one or more years' experience responding to Advanced Persistent Threat (APT) type incidents

Technologies

• PowerShell, Python, Ruby, Perl
• Nessus, OpenVAS, Qualys
• Metasploit, Burp, ZAP