Senior Offensive Security Consultant

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SpecterOps

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2016

🔒 Cybersecurity

🏢 Enterprise

📚 Education

Cybersecurity • Enterprise • Education

SpecterOps is a cybersecurity company specializing in attack path management and advanced adversarial tactics training. They offer products like BloodHound Enterprise, which is a tool for managing identity attack paths. SpecterOps provides a wide range of services including penetration testing, red team engagements, and purple team assessments to improve clients' security operations. They emphasize the integration of technical components to ensure robust prevention, detection, and response capabilities. SpecterOps also offers comprehensive training programs focused on adversary tactics, tradecraft analysis, and other cybersecurity fundamentals. The company is recognized for its open-source contributions and collaboration with the cybersecurity community.

📋 Description

• Plan and conduct offensive security engagements ranging in size, scope, focus, and approach • Communicate findings, attack paths, recommendations, and strategy to technical and executive client stakeholders through written reports and verbal presentations • Build scripts, tools, or methodologies to enhance offensive services • Serve as a subject matter expert in initial access, open-source intelligence analysis, adversary tradecraft, offensive Windows/Linux/macOS operations, evasion operations, or technical capability development • Utilize common offensive security testing tools and tradecraft • Stay up to date with cutting-edge adversary tradecraft and vulnerabilities • Communicate successes and obstacles with fellow team members and team leads • Interface with client contacts and staff professionally • Coordinate and prepare for internal and customer-facing meetings • Assist with scoping prospective engagements and participate in technical testing from kickoff through remediation • Mentor less experienced staff • Train team members in adversary Tactics, Techniques, and Procedures (TTPs) and tools • Contribute to and improve SpecterOps training-course content and assist with course delivery

🎯 Requirements

• Ability to travel domestically and internationally, up to an average of 25% annually • Must be able to pass a criminal background check • Desire to embody SpecterOps core values • Proficient knowledge of offensive security concepts and assessments • Proficient knowledge of security principles, policies, and industry best practices • Proficient knowledge of Windows and *NIX-based operating systems • Proficient knowledge of networking concepts • Proficient knowledge of Active Directory • Working knowledge of programming or scripting languages such as C#/.NET, C++, Python, PowerShell, and Bash • Aptitude for technical writing, including assessment reports, presentations, and operating procedures • Strong written/verbal communication and interpersonal skills • Expert capability in one or more service lines and/or technical areas • Experience leading small teams and engagements • Experience managing multiple projects simultaneously • Experience communicating with clients and delivering presentations • Experience independently managing client projects • Ability to lead and execute most offensive security service offerings • Willingness to develop and deliver training content as a lead course instructor • Willingness to mentor and train fellow consultants • Bachelor's degree in a technical field (nice to have, not required) • Experience with Fortune 1000 and/or large Federal Government security assessments (nice to have) • Public community contributions such as conference presentations, blog posts, white papers, or public tool development (nice to have) • Experience administering, attacking, or defending Windows/Active Directory, Linux, and/or macOS environments (nice to have) • Experience in technical writing (nice to have) • Experience working for a service-based information security consultancy (nice to have) • Experience developing and/or providing technical training (nice to have) • Desire to teach and train students in offensive techniques (nice to have) • Desire to travel internationally and domestically more frequently (nice to have) • Candidate must be authorized to work and reside in the United States; immigration visa sponsorship is not currently provided

🏖️ Benefits

• Health/Dental/Vision/life insurance: 100% covered for both the employee and their family • Flexible time off policy • 13 paid holidays annually • 401(k) with up to 4% company match • Equity and bonuses based on company performance • Remote work: $1,500 first year allowance to set up home office • $500 annual home office allowance after first year • $1800 annual cell phone and internet reimbursement • $5,000 annual professional development allowance • $5,250 towards continuing education or student loan repayment • $1,200 annual budget for lifestyle, wellness, pet insurance and more • A one-time $10,000 benefit towards family planning • Open intellectual property policies; allow researchers to retain rights over open-sourced research & tools • In person and virtual employee events throughout the year • Company swag