Senior Security Consultant, Red Team

IOActive, Inc.; Brasil; Híbrido; BRL 380 131 - 760 263; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive compensation

Access to technical teams

Flexibility to work remotely

Travel opportunities

Resumo da oferta

IOActive, Inc. is seeking a skilled Security Consultant to perform red and purple team campaigns, manage projects, and communicate complex vulnerabilities to clients. The ideal candidate will have extensive experience in penetration testing and covert operations.

Join a high-energy team that values innovation and offers the opportunity to work remotely or on-site. Competitive compensation is available based on experience and performance.

Qualificações

• Experience in red team activities and adversarial emulation.
• Strong penetration testing skills across various platforms.
• Proficiency in programming languages including Python and Ruby.

Responsabilidades

• Perform Red and Purple Team Campaigns for clients.
• Manage project tasks across time zones.
• Develop technical reports detailing vulnerabilities.

Conhecimentos

Red team operations

Penetration testing

C2 frameworks

Python

Network architecture

Windows & Linux administration

Vulnerability assessment

Ferramentas

Cobalt Strike

Metasploit

Descrição da oferta de emprego

What You’ll Do

• Work as part of a team performing Red and Purple Team Campaigns for IOActive clients, both remotely and on‑site
• Perform adversarial emulation, assumed breach scenarios, post‑exploitation, social engineering, and physical security testing
• Manage project tasks and deadlines on a multi‑time‑zone team
• Develop unique tools to assist in project goals
• Exploit vulnerabilities found in client’s people, processes, and technology; then clearly communicate complex vulnerabilities to both technical and non‑technical client staff
• Create comprehensive technical reports explaining technical and business risk of the vulnerabilities found. This includes actionable recommendations/considerations for the client
• Participate in project conference calls with clients and on business development calls in support of sales activities
• Create and lead technical customer presentations
• Provide technical leadership/mentorship to the consulting team and to our clients on security topics
• Contribute to the security industry through presentations, whitepapers and/or research

What You Bring

• Experience performing and leading covert red team operations and activities, including performing adversarial emulation, assumed breach scenarios, post‑exploitation, social engineering, and physical security testing
• Penetration testing experience in Network, Web applications, Wireless networks, Physical security, and Social engineering
• Experience with C2 and post‑exploitation frameworks, including Cobalt Strike, Empire, Metasploit, Throwback, and similar tools
• Understanding and proficiency with some of the following: Python, Ruby, PowerShell, Java, and Shell scripting
• Knowledge and experience with enterprise network/system/application architecture and design including complex environments utilizing Microsoft Windows, Active Directory, and Linux
• Deep understanding on Windows and Linux systems administration and post‑exploitation activities on each platform
• Ability to present complex material in a digestible, consumable manner to all levels of management
• Highly experienced with OS, services, and application hardening
• Strong ability to find vulnerabilities and develop proof of concepts
• Ability and desire to travel at least 50% of the time – both nationally and globally

What We Offer

• A chance to work with an industry leader in cyber security
• Access to world‑class technical teams and research
• A high‑energy, collaborative team that values innovation
• Flexibility—work remotely or from the office as needed
• Opportunities for travel
• Competitive compensation and performance-based incentives

Compensation Range: 75,000 to 150,00 USD, based on location and experience level.

IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time.