Red Team Security Engineer

Millennium; Huntsville (AL); On-site; USD 120,000 - 180,000; Full time

Job summary

Millennium in Huntsville, AL is seeking a Red Team Security Engineer to perform penetration testing across global networks and rapidly develop domain-specific tools. You will research exploitation techniques and design representative test environments while supporting training events and certifications.

The role requires active Secret clearance with TS/SCI eligibility, a STEM degree or equivalent with 3–5 years of experience, and CEH/CISSP certifications on hire.

Qualifications

• Active Secret Clearance with TS/SCI eligibility required.
• Bachelor's degree in CS/IS/Engineering or math-intensive discipline or equivalent; 3–5 years experience; 2 years with Associate's degree equivalent.
• Must have CEH & CISSP certifications upon hire.
• Specialized Red Teaming, CNA/CNE/CND, or penetration testing experience.
• Ability to independently develop tools and scripts across languages.

Responsibilities

• Conduct multiple penetration tests of global customer networks.
• Rapid development of domain-specific tools leveraging vulnerabilities.
• Research latest exploitation techniques and threat vectors; design test environments.
• Support training events, conferences, and demonstrations; ensure certification requirements are met.

Skills

Red Teaming

Penetration Testing

CNA/CNE/CND

Scripting

Multi-language scripts

Education

Bachelor's degree or equivalent

Tools

Kali Linux

Metasploit

Cobalt Strike

Intercepting Proxies

Job description

Millennium is hiring Red Team Security Engineer in Huntsville, AL. All candidates must have an active Secret Clearance with TS/SCI eligibility to qualify for consideration.

The Red Team Security Engineer will conduct multiple penetration tests of global customer networks, rapid development of domain or problem-specific tools that leverage identified vulnerabilities, research on the latest exploitation techniques and threat vectors, and design and configuration of representative test environments.

Candidate must support various training events, conferences, exercises, and demonstrations to ensure continued compliance with team member certification requirements to enhance technical capabilities, and to support authorized missions and test events.

Qualifications:

• All candidates must have an active Secret Clearance with TS/SCI eligibility to qualify for consideration.
• Bachelor’s degree from an accredited college or university in computer science, information systems, engineering, scientific or a mathematics-intensive discipline or a Relevant Technical Discipline. At least 3-5 years of practical experience required. Two years of relevant experience with an Associate’s degree will be considered the equivalent of a Bachelor’s degree. Four years of relevant experience will be considered equivalent to a Bachelor’s degree.
• Must have a CEH & CISSP Certification upon hire
• SPECIALIZED experience in Red Teaming, Computer Network Attack (CNA), Computer Network Exploitation (CNE), Computer Network Defense (CND), and/or penetration testing
• Ability to independently and rapidly develop tools and scripts from concept to production in a high-stress, short deadline, under-resourced environment using multiple programming languages

Additional Requirements:

• Experience with at least one of the following scripting languages (PowerShell, Bash, Python, Ruby, Node.js)
• Experience performing web application security assessments
• Experience with TCP/IP protocols as it relates to network security
• Experience with offensive tool sets including: Kali Linux, Metasploit, CobaltStrike, Intercepting Proxies, etc.
• Experience in using network protocol analyzers and sniffers, as well as ability to decipher packet captures
• Proven ability to work effectively with management, staff, vendors, and external consultants
• Ability to think outside the box and emulate adversarial approaches
• Capable of conducting penetration tests on applications, systems and network utilizing proven/formal processes and industry standards.
• Capable of managing multiple penetration test engagements, from cradle to grave, at the same time
• In depth understanding of emerging threats, vulnerabilities, and exploits