External Attack Surface Specialist (Red Team)

mymoose; United States; On-site; USD 120,000 - 150,000; Full time

Job summary

Rapid7’s Vector Command team seeks a Security Specialist to advance external attack surface analysis, OSINT gathering, and monthly red team deliverables. You will liaison with customers and internal teams to translate complex findings into actionable security improvements.

You will onboard clients, coordinate reports, and host monthly update calls while staying current on vulnerabilities and surface changes across environments.

Qualifications

• 3+ years in an active technical security role.
• Knowledge of modern penetration testing tools and methods.
• Experience prioritizing customer success and investigative reporting.
• Knowledge of external attack surface reconnaissance techniques for internet-facing exposures.
• Strong knowledge of Windows/Linux/UNIX internals and TCP/IP suite.
• Experience with OSINT and social engineering techniques.

Responsibilities

• Onboard customers to the Vector Command platform and technologies.
• Oversee and ensure completeness of customer report deliverables.
• Serve as primary point of contact for testing operations and alerts.
• Coordinate and host monthly Vector Command update calls with Rapid7 leads.
• Translate technical concepts for non-security personnel.
• Coordinate communications between internal Rapid7 services (MDR/MVM).
• Provide monthly written summaries of each customer attack surface and operations.
• Analyze customer exposures and attack surfaces within Vector Command.
• Conduct manual network/service reconnaissance for new exposures.
• Perform OSINT gathering to identify extended attack surface elements.
• Keep Red Team informed of significant changes in customers' surfaces.
• Coordinate requests and prioritizations with Red Team operators.
• Develop scripts to query/analyze attack surface data from sources.
• Perform entry-level penetration testing on external assets as assigned.

Skills

Active security experience

Penetration testing tools

External attack surface

Network/Web security concepts

OSINT gathering

Python

PowerShell

Customer communication

Security certifications

Job description

Rapid7’s Vector Command team seeks a Security Specialist to advance external attack surface analysis, OSINT gathering, and monthly red team deliverables. You will liaison with customers and internal teams to translate complex findings into actionable security improvements.

You will onboard clients, coordinate reports, and host monthly update calls while staying current on vulnerabilities and surface changes across environments.