Senior Red Team Consultant - Offensive Security

Google; Chicago (IL); Hybrid; USD 138,000 - 200,000; Full time

Job summary

Google Cloud's Mandiant Red Team offers adversarial emulation engagements for large enterprises, including Threat Intel-led red team operations, C2 infrastructure, and social engineering campaigns. The exercise may involve phishing and attempting to compromise internet-facing systems, with privilege escalation and lateral movement within customer networks, all while evading detection by security operations teams.

Individual pay is determined by job-related skills and education.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related field, or equivalent practical experience.
• 5 years of experience with pen testing and red teaming functions across networks, apps, cloud, and social engineering.
• Experience with tools used for wireless, web application, and network security testing.
• Ability to travel up to 20% of the time.

Responsibilities

• Perform red and purple team assessments and pre-deployed implants when applicable.
• Conduct external and internal wireless assessments, web and mobile apps testing, and embedded system assessments.
• Recognize and safely utilize attacker tools, TTPs, and procedures.
• Develop comprehensive reports and presentations for technical and executive audiences.
• Advise clients on security practices for remediating discovered issues.

Skills

Penetration testing

Red teaming

Scripting

Tool development

Security testing tools

Education

Bachelor's degree in Computer Science

Tools

Wireless testing tools

Web/mobile testing tools

Network security testing tools

Job description

Google Cloud's Mandiant Red Team offers adversarial emulation engagements for large enterprises, including Threat Intel-led red team operations, C2 infrastructure, and social engineering campaigns. The exercise may involve phishing and attempting to compromise internet-facing systems, with privilege escalation and lateral movement within customer networks, all while evading detection by security operations teams.

Individual pay is determined by job-related skills and education.