Red Teamer-Team6 Specialist

What Will You Do

• Actively involved as an individual contributor specialist and subject matter experts from the beginning to the end such as: (1) upon request, during an active incident response of a real attack,  (2) data/system breaches,  (3) catastrophic system failures due to cyberattack, and  (4) involved early in any strategic or sensitive projects that required higher degree of security assessments from the adversaries’ attack point of view
• Dedicatedly assist in identifying, tracing and neutralizing the active threats
• Perform a thorough documentation on how vulnerabilities were exploited and what changes should be made to prevent that from being exploited again
• Assist/participate in presenting the findings to multiple stakeholders involved in the study and/or incidents
• Proactively identify (and attempt to exploit) multiple vulnerabilities that are affecting the system and data security of our business
• Obtain a realistic understanding of the risks that our business can face including training used to prepare employees for cyber incidents
• Ensure that you upkeep required training regimens within Team6 and across the rest of the Red Team members
• Conducting regular purple teaming exercises together with the Blue Team.

What Will You Need

• At least 3 years of experience in ethical hacking (active exploitation), manual penetration testing and/or red teamer operations covering at least two of the following domains: infrastructure, operating systems, web app, mobile app, software bug testing
• A decent level of code/programming experience (e.g.: write/modify exploit codes, trace and debugging traditional/OOP/API style programming).A strong hacker mindset including social engineering, logical and creative thinking (outside of the box) and unconventional thought processes when playing the devil advocates
• Strong dedication and desire to understand how things work, on a very deep level
• Experience with the red teaming aspect of technical writing documentation of the findings to multiple levels of stakeholders (from engineering to executive)Prior experience in designing and/or conducting technical training
• Hands-on experience in at least two of the following domains: Infrastructure Hardening (Cloud & On-Premise), Vulnerability Research, Social Engineering, Reverse Engineering, Active Exploitation, Exploit Development, DevSecOps (incl. CI/CD)
• Having professional certification(s) related to red-teaming such as GIAC (GPEN, GCPN, GWAPT, GMOB, GXPN) or Offensive Security (OSCP, OSEP, OSWA/E, OSED/OSMR ) is bonus point