Red Team Security Engineer II

Millennium Corporation; Huntsville (AL); On-site; USD 80,000 - 110,000; Full time

Job summary

Millennium Corporation is seeking a Red Team Security Engineer II in Huntsville, AL. The role involves conducting penetration tests and developing tools to leverage identified vulnerabilities. Candidates must have an active Secret Clearance with eligibility for a Top Secret/SCI Clearance and 3-5 years of related experience.

Applicants should have a Bachelor’s degree in a relevant field and certifications like CEH and CISSP. Additional skills in scripting and offensive tools are highly preferred for this position.

Qualifications

• Must have an active Secret Clearance with eligibility to obtain Top Secret/SCI Clearance.
• 3-5 years of practical experience required.
• Must have CEH & CISSP Certification upon hire.
• Ability to independently develop tools and scripts in high-stress environments.
• Experience performing web application security assessments.

Responsibilities

• Conduct multiple penetration tests of global customer networks.
• Rapidly develop domain or problem-specific tools.
• Research on the latest exploitation techniques.
• Support various training events and demonstrations.

Skills

Red Teaming

Computer Network Attack (CNA)

Penetration Testing

Scripting languages (PowerShell, Bash, Python, etc.)

Web Application Security Assessments

Education

Bachelor’s degree in relevant field

Tools

Kali Linux

Metasploit

CobaltStrike

Job description

What We Believe

Millennium is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state, or local law.

Responsibilities

Millennium is hiring Red Team Security Engineer II in Huntsville, AL. Candidate must have an active Secret Clearance with eligibility to obtain a Top Secret/SCI Clearance.

The Red Team Security Engineer will conduct multiple penetration tests of global customer networks, rapid development of domain or problem-specific tools that leverage identified vulnerabilities, research on the latest exploitation techniques and threat vectors, and design and configuration of representative test environments.

Candidate must support various training events, conferences, exercises, and demonstrations to ensure continued compliance with team member certification requirements to enhance technical capabilities, and to support authorized missions and test events.

Qualifications

• Must have an active Secret Clearance with eligibility to obtain a Top Secret/SCI Clearance
• Bachelor’s degree from an accredited college or university in computer science, information systems, engineering, scientific or a mathematics-intensive discipline or a Relevant Technical Discipline. At least 3-5 years of practical experience required. Two years of relevant experience with an Associate’s degree will be considered the equivalent of a Bachelor’s degree. Four years of relevant experience will be considered equivalent to a Bachelor’s degree.
• Must have a CEH & CISSP Certification upon hire
• SPECIALIZED experience in Red Teaming, Computer Network Attack (CNA), Computer Network Exploitation (CNE), Computer Network Defense (CND), and/or penetration testing
• Ability to independently and rapidly develop tools and scripts from concept to production in a high-stress, short deadline, under-resourced environment using multiple programming languages

Additional Requirements:

• Experience with at least one of the following scripting languages (PowerShell, Bash, Python, Ruby, Node.js)
• Experience performing web application security assessments
• Experience with TCP/IP protocols as it relates to network security
• Experience with offensive tool sets including: Kali Linux, Metasploit, CobaltStrike, Intercepting Proxies, etc.
• Experience in using network protocol analyzers and sniffers, as well as ability to decipher packet captures
• Excellent independent (self-motivational, organizational, personal project management) skills
• Proven ability to work effectively with management, staff, vendors, and external consultants
• Ability to think outside the box and emulate adversarial approaches
• Capable of conducting penetration tests on applications, systems and network utilizing proven/formal processes and industry standards.
• Capable of managing multiple penetration test engagements, from cradle to grave, at the same time
• In depth understanding of emerging threats, vulnerabilities, and exploits

Business Development

Assist with Business Development activities as required to support Millennium's strategic business objectives, which may include but not limited to participation in technical interviews, creation of technical documentation, general proposal writing support and proposal color reviews.

Physical Requirements

• Must be comfortable with prolonged periods of sitting at a desk and working on a computer.
• Must be able to lift up to 10-15 pounds at a time.

Travel Requirements

15-30% (or less) travel as required by the program.