Penetration Tester / Red Team Analyst

BW Cyber; Raleigh (NC); On-site; USD 110,000 - 150,000; Full time

Job summary

BW Cyber in Raleigh, NC seeks a Penetration Tester / Red Team Analyst for an onsite role. You will emulate adversary TTPs, plan engagements, and deliver technical and executive-level findings to help reduce client risk.

Responsibilities include conducting infrastructure, web app, wireless, phishing, and cloud hygiene assessments, developing engagement plans, and delivering actionable remediation guidance to clients and staff.

Qualifications

• Expertise creating exploits for vulnerabilities and practical scripting for testing.
• Experience with common vulnerability scanners and penetration testing tool suites.
• Bachelor's degree or higher in a relevant field and 3–5 years of experience.

Responsibilities

• Emulate adversary TTPs to validate security controls across client environments.
• Develop rules of engagement and brief clients on findings and mitigations.
• Perform infrastructure, web app, wireless, and cloud hygiene assessments.
• Conduct phishing/spearphishing and social engineering campaigns as needed.
• Analyze findings and produce detailed client reports for IT staff and executives.
• Provide remediation guidance and monitor progress with POA&M tracking.

Skills

PowerShell

Python

Ruby

Perl

Exploit development

Education

Bachelor's degree or higher

Tools

Nessus

OpenVAS

Qualys

Metasploit

Burp Suite

ZAP

Job description

BW Cyber is seeking a Penetration Tester / Red Team Analyst based in Raleigh, NC for an onsite role. In this position, you will emulate adversary TTPs to assess and validate the effectiveness of security controls across client environments.

You will plan and execute technical security testing, develop engagement parameters, and deliver clear findings to both technical and executive audiences. The work includes producing detailed reports for IT staff, presenting high-level summaries for stakeholders, and advising on remediation actions to reduce risk.

Responsibilities

• Emulate adversary tactics, techniques, and procedures (TTPs) to validate security controls effectiveness
• Develop rules of engagement and brief clients on findings and mitigation techniques
• Perform technical security assessments of client environments, including infrastructure penetration tests
• Perform technical security assessments of client environments, including vulnerability assessments
• Perform technical security assessments of client environments, including web application tests
• Perform technical security assessments of client environments, including wireless security tests
• Perform technical security assessments of client environments, including social engineering campaigns (phishing, spearphishing, and pretexting)
• Perform technical security assessments of client environments, including public cloud hygiene reviews
• Develop rules of engagement, and configure, tune, and operate industry standard assessment tools
• Coordinate, schedule, and support security testing requests
• Evaluate findings to determine applicability, saturation, and potential impact
• Analyze results and produce reports for clients
• Create detailed technical reports for IT staff
• Deliver high-level summary presentations for executives
• Advise client stakeholders of findings and provide remediation guidance
• As appropriate, monitor remediation efforts of findings and communicate progress to stakeholders
• As appropriate, work with client stakeholders to develop Plan of Action & Milestones (POA&M) tracker to ensure identified weaknesses are addressed in a timely and cost-effective manner
• As needed, assist in cyber incident response for clients

Requirements

• Expertise creating exploits for vulnerabilities or demonstrated expertise using a scripting language such as PowerShell, Python, Ruby, or Perl for penetration testing or incident response
• Expert in common vulnerability scanners, e.g. Nessus, OpenVAS, Qualys
• Expert in common penetration testing tools, e.g. Metasploit, Burp, ZAP
• Bachelor's degree or higher
• 3-5 years of experience in penetration testing or incident response
• One of the following active certifications: GXPN, OSCE, OSCP, OSEE, or one or more years' experience responding to Advanced Persistent Threat (APT) type incidents

Technologies

• PowerShell, Python, Ruby, Perl
• Nessus, OpenVAS, Qualys
• Metasploit, Burp, ZAP