Penetration Tester, Social Engineering Specialist

Job not on LinkedIn

🕒 May 27

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔧 QA Engineer (Quality Assurance)

🇬🇧 UK Skilled Worker Visa Sponsor

This company has sponsored UK Skilled Worker visas in the past.

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Rapid7

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2000

🔒 Cybersecurity

Cybersecurity

Rapid7 is a cybersecurity company that provides a range of solutions designed to secure cloud, identity, and endpoint products. The company's Command Platform utilizes artificial intelligence to offer deep insights into cybersecurity threats and vulnerabilities. Rapid7's offerings include Managed XDR for continuous monitoring, detection, and incident response, as well as tools for attack surface management, vulnerability management, and threat intelligence. The company is known for its open-source projects like Metasploit and Velociraptor, which aid in vulnerability research and enhancing cybersecurity frameworks. Rapid7 also emphasizes community and culture, contributing to diversity, equity, and inclusion, and engages in public policy advocacy to strengthen cybersecurity on a broader scale. They serve over 11,000 global companies and deliver expert analysis on attack trends and emergent threats through Rapid7 Labs.

📋 Description

• Deliver Rapid7’s Vector Command Continuous Red Teaming service • Design social engineering campaigns at scale, supporting numerous customers each month • Deploy, configure, and maintain social engineering infrastructure to perform phishing operations at scale • Perform manual and automated reconnaissance at scale to identify targets for social engineering operations • Leverage external network vulnerabilities in social engineering attacks • Research the latest techniques in social engineering and implement them in campaigns • Research and test methods to bypass social engineering defenses • Be an expert in sending phishing emails to client inboxes • Design and execute vishing campaigns • Evaluate impact of credential breaches and coordinate with team members for post-compromise simulation • Develop positive relationships with clients and understand their business needs

🎯 Requirements

• 5+ years in an active technical security role • Strong knowledge of Advanced Social engineering techniques and tactics • Infrastructure management and deployment (domain records, web servers, terraform, ansible, phishing website creation) • Modern penetration testing tools and methods • Network, wireless and web application security concepts • Experience using interpreted languages (Ruby, Python, PHP, etc.) • Knowledge of common regulatory structures and obligations and common I.T. governance • Bug Bounty experience, identifying novel vulnerabilities in arbitrary internet-facing attack surfaces • Certifications such as OSCP, OSCE, GXPN, OSEE, CREST • Experience with Red & Purple Teams

🏖️ Benefits

• Competitive salary • Flexible working hours • Professional development opportunities