Collaborate with other teams within the Cyber Fusion Center and the wider organization.
Support Offensive Security's engagement at multiple organizational levels.
Participate in performing physical exploitation, network exploitation, and social engineering assessments.
Leverage Cyber Threat Intelligence and Offensive Security Research to develop test cases.
Help establish and lead Social Engineering and Human Risk Assurance functions.
Work with the team to provide remediation recommendations across the organization.
Develop scripts, tools, and methodologies to increase Offensive Security's capabilities.
Use AI tools to assist with Offensive Security activities.
Use MITRE ATT&CK Framework and structured attack analysis tools.

Requirements

8+ years of cybersecurity experience
3+ years of experience in offensive security and adversary simulation
Understanding of Human Risk and experience performing social engineering assessments
Detailed knowledge of global cyber threats, threat actors, and the tactics, techniques and procedures used by cyber adversaries
3+ years of experience in two or more of the following areas:
- Network penetration testing
- Web application penetration testing assessments
- Email, phone, or physical social-engineering assessments
- Developing, extending, or modifying exploits
- Covert physical intrusion
- Cloud security or penetration testing
Proficient in attacker tooling
Proficient in one or more programming/scripting languages (C, C++, C#, Go, Python, PowerShell, Bash, Ruby)
Knowledge of Windows Operating System architecture
Industry certifications such as OSCP, OSCE, OSWE, GPEN, GCIH, GWAPT, GXPN, or equivalent experience.

Benefits

Great compensation package and bonus plan.
Core benefits including medical, dental, vision, and matching 401K.
Flexible work environment, ability to work remote, hybrid or in-office.
Flexible time off including volunteer time off, vacation, sick and 12-paid holidays.

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard skills

offensive securityadversary simulationnetwork penetration testingweb application penetration testingsocial engineering assessmentscloud securityattacker toolingprogramming languagesscripting languagesMITRE ATT&CK Framework

Soft skills

collaborationleadershipcommunicationremediation recommendationsrisk assurance

Certifications

OSCPOSCEOSWEGPENGCIHGWAPTGXPN