Senior Consultant, Adversary Services – Red Team

Emploi pas sur LinkedIn

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

💵 $152 000 - $189 000 / an

⏰ Temps Plein

🟠 Senior

💼 Consultant

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Coalfire

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 2001

💼 Conseil

🏥 Santé

📦 Logistique

Consulting • Healthcare • Logistics

Coalfire est un fournisseur de services de cybersécurité qui aide les entreprises à améliorer leur résilience en matière de sécurité et à simplifier la conformité réglementaire. La société propose des services dirigés par des experts, incluant des programmes de cybersécurité axés sur les menaces, l'automatisation de la conformité, la gestion des risques et des services de conseil en sécurité, couvrant divers secteurs tels que les services financiers, la santé, le commerce de détail et la technologie. Coalfire est réputée pour son expertise en matière de hackers et de défenseurs, et ses plateformes sont conçues pour renforcer la résilience cybernétique des clients, réduire les surfaces d'attaque et accélérer l'atteinte d'objectifs de conformité comme FedRAMP et HITRUST.

Description

• Lead red team, adversary emulation, and purple team engagements for clients across a range of industries and environments, recommending appropriate remediation measures, with reporting aligned to MITRE ATT&CK and other relevant frameworks. • Detection and response evasion, creation of novel tactics and exploits, simulation of threat actor TTPs, and the evolution of sophisticated command and control (C2) infrastructure. • Act as a trusted advisor to our clients on security matters, providing insights and recommendations to inform strategic decision-making. • Develop and execute on sophisticated offensive cybersecurity tradecraft to gain initial access, establish persistence, escalate privileges, move laterally, and evade detection and response controls. • Stay current with emerging security threats and trends, and proactively identify areas of improvement to enhance our security posture. • Develop and maintain custom exploit code, scripts, and tools to automate and streamline adversary services activities. • Contribute to internal tradecraft, reusable tooling, testing methodologies, and team knowledge sharing. • Support thought leadership through research, internal training, blog content, conference presentations, or customer workshops.

🎯 Exigences

• 5+ years of experience in penetration testing, adversary services/red teaming, and purple teaming, with a minimum of 2+ years leading covert Red Team engagements. • Significant experience creating and delivering specialized testing for customers on the latest threat actor TTPs and capabilities, including advanced persistent threats (APTs), ransomware, and insider threats. • Experience presenting thought leadership, including talks at security conferences, blogs, or in other forums. • Deep technical expertise in adversary services-related tradecraft, including development and management of command and control infrastructure, custom development of leading C2 toolsets (e.g. Cobalt Strike, Sliver, Mythic), and stewardship of evasion techniques to maximize effectiveness. • Extensive experience conducting adversary services engagements across a variety of platforms and environments, including on-premise, cloud, and hybrid environments. • Excellent communication and collaboration skills, with the ability to effectively convey complex technical concepts to both technical and non-technical audiences. • Experience in all components of the attack chain, including OSINT, social engineering (e.g. phishing, vishing), custom payload creation, C2 infrastructure, lateral movement, privilege escalation, and impact objectives. • Technical knowledge of programming and scripting languages (e.g. Python, Ruby, Go) to develop and modify custom evasion tooling and infrastructure. • Ability to thrive in a fast-paced, dynamic environment, and adapt quickly to changing priorities and requirements. • Ability to foster a positive work environment and attitude, with a “team first” mentality.

🏖️ Avantages

• paid parental leave • flexible time off • certification and training reimbursement • digital mental health and wellbeing support membership • comprehensive insurance options