Support Vector Command customers by conducting external attack surface analysis, exposure reconnaissance, account and tool integrations
Prepare monthly red team report deliverables and prioritize customer requests
Work daily with Rapid7’s Vector Command Red Team operators
Assist with ongoing red team exercises and stay up to date on latest vulnerabilities
Onboard customers to the Vector Command platform
Oversee and ensure completeness of customer report deliverables
Serve as the primary point of contact for customer inquiries related to testing operations
Coordinate and host monthly Vector Command Red Team update calls
Analyze customer’s exposures and attack surface within the Vector Command platform
Conduct manual network and service reconnaissance to identify new exposures
Perform Open-Source Intelligence (OSINT) gathering on customers
Provide monthly written summaries of each customer’s attack surface and Vector Command Red Team operations.

Requirements

3+ years in an active technical security role
Excellent written and verbal communication skills
Previous technical security consulting experience
Knowledge of modern penetration testing tools and methods
Knowledge of external attack surface reconnaissance techniques to identify customer’s internet facing exposures
Strong knowledge of network, web-based application, and IEEE 802.11 security concepts
Knowledge of Windows/Linux/UNIX internals and the Internet protocol suite
Experience using scripting languages such as Python and PowerShell
Experience with social engineering techniques and tactics related to reconnaissance and OSINT gathering
A Bachelor’s degree in Computer Science, MIS, CIS or a related field, or equivalent experience
Certifications such as GPEN, PJPT, PNPT, CPTS, or OSCP are preferred.

Benefits

Health insurance
401(k) matching
Flexible work hours
Paid time off

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

penetration testingexternal attack surface reconnaissancenetwork securityweb-based application securityIEEE 802.11 securityWindows internalsLinux internalsUNIX internalsscripting languagesOpen-Source Intelligence (OSINT)

Soft Skills

written communicationverbal communicationcustomer supportcoordinationreporting

Certifications

GPENPJPTPNPTCPTSOSCP