Senior Red Team Tester - Remote & Cloud Security

Valiant Solutions, LLC; Oregon; Hybrid; USD 130,000 - 142,000; Full time

Benefits offered by this job

Medical plans

Dental & vision coverage

Company-paid life insurance

401(k) match

PTO & federal holidays

Certifications reimbursement

Wellness program

Referral bonuses

Job summary

Valiant Solutions is seeking a Red Team Tester – Mid to independently perform authorized adversarial assessments of our government customer's systems, applications, networks, APIs, and cloud environments.

You will develop and execute realistic attack scenarios aligned with the MIT&CK framework, identify exploitable attack paths that automated vulnerability scanning does not reveal, and evaluate how well defensive controls detect and respond.

Qualifications

• At least 5 years of experience in the subject area.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related field.
• A senior industry professional certification such as CISSP or equivalent.
• Demonstrated experience conducting penetration testing, red team assessments, or offensive security testing.
• Hands-on experience testing enterprise networks, applications, APIs, or cloud environments.
• Knowledge of common exploitation techniques and attack paths across Windows and Linux environments.
• Working knowledge of MITRE ATT&CK and penetration testing methodologies.
• Experience with tools such as Burp Suite, Nmap, Metasploit, Kali Linux, Wireshark, Nessus/Tenable, BloodHound, or comparable offensive security tools.
• Scripting experience in Python, PowerShell, Bash, or similar languages.
• Exposure to AWS cloud security testing.
• Additional offensive security certifications such as OSCP, PNPT, eJPT, CEH, or Security+.
• Experience translating technical testing results into well-supported findings and remediation recommendations.
• Familiarity with NIST SP 800-115.

Responsibilities

• Plan and execute red team test scenarios consistent with the approved rules of engagement (ROE), scope, objectives, and testing methodology.
• Conduct reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, persistence, and other authorized adversarial activities.
• Develop attack scenarios and tactics, techniques, and procedures (TTPs) aligned with relevant threat actors and the MITRE ATT&CK framework.
• Conduct network, web application, API, identity and access, and cloud security testing as assigned.
• Evaluate combinations of vulnerabilities and configuration weaknesses to identify attack paths that automated vulnerability scanning may not reveal.
• Develop or modify scripts, tools, payloads, and testing techniques as each assessment requires.
• Document testing procedures, evidence, vulnerabilities, attack chains, risk, and remediation recommendations.
• Contribute to red team assessment plans and to preliminary and final assessment reports.
• Participate in purple team activities with defensive and security operations center (SOC) personnel to compare attacker activity with security telemetry, detections, and defensive response.
• Validate remediation actions and perform targeted retesting when required.
• Support less-experienced testers through technical guidance and peer review.
• Serve as a technical expert across multiple assessment assignments.
• Maintain knowledge of current adversary techniques, vulnerabilities, exploits, and offensive security technologies.

Skills

Red team

Penetration testing

MITRE ATT&CK

Cloud security

Python

Nmap

Education

Bachelor's degree in cybersecurity

CISSP

Tools

Burp Suite

Nmap

Metasploit

Kali Linux

Wireshark

Nessus/Tenable

BloodHound

Job description

Valiant Solutions is seeking a Red Team Tester – Mid to independently perform authorized adversarial assessments of our government customer's systems, applications, networks, APIs, and cloud environments.

You will develop and execute realistic attack scenarios aligned with the MIT&CK framework, identify exploitable attack paths that automated vulnerability scanning does not reveal, and evaluate how well defensive controls detect and respond.