Vector Command Specialist

mymoose; United States; On-site; USD 120,000 - 150,000; Full time

Job summary

Rapid7’s Vector Command team seeks a Security Specialist to advance external attack surface analysis, OSINT gathering, and monthly red team deliverables. You will liaison with customers and internal teams to translate complex findings into actionable security improvements.

You will onboard clients, coordinate reports, and host monthly update calls while staying current on vulnerabilities and surface changes across environments.

Qualifications

• 3+ years in an active technical security role.
• Knowledge of modern penetration testing tools and methods.
• Experience prioritizing customer success and investigative reporting.
• Knowledge of external attack surface reconnaissance techniques for internet-facing exposures.
• Strong knowledge of Windows/Linux/UNIX internals and TCP/IP suite.
• Experience with OSINT and social engineering techniques.

Responsibilities

• Onboard customers to the Vector Command platform and technologies.
• Oversee and ensure completeness of customer report deliverables.
• Serve as primary point of contact for testing operations and alerts.
• Coordinate and host monthly Vector Command update calls with Rapid7 leads.
• Translate technical concepts for non-security personnel.
• Coordinate communications between internal Rapid7 services (MDR/MVM).
• Provide monthly written summaries of each customer attack surface and operations.
• Analyze customer exposures and attack surfaces within Vector Command.
• Conduct manual network/service reconnaissance for new exposures.
• Perform OSINT gathering to identify extended attack surface elements.
• Keep Red Team informed of significant changes in customers' surfaces.
• Coordinate requests and prioritizations with Red Team operators.
• Develop scripts to query/analyze attack surface data from sources.
• Perform entry-level penetration testing on external assets as assigned.

Skills

Active security experience

Penetration testing tools

External attack surface

Network/Web security concepts

OSINT gathering

Python

PowerShell

Customer communication

Security certifications

Job description

As a Vector Command Specialist, you will work with a team of offensive security consultants to help clients improve their security posture through your technical skills and knowledge of attack surface management strategies. You will serve as a technical analyst and customer liaison. You will also work with various Managed Services teams to help deliver monthly reports to customers, address customer needs, and assist with other security consultant deliverables.

About the Team

Vector Command is an always-on Red Team operation supporting multiple customers. As part of a specialized team, you will emulate real adversaries by performing large-scale reconnaissance, identifying exposed or high-value assets, and discovering weaknesses that can be leveraged for compromise. After gaining access, the team continues with post-compromise objectives to demonstrate real impact, evade detection, and assess the effectiveness of security controls. This service evaluates far more than vulnerabilities-it tests the customer's entire security posture and defense-in-depth strategy.

In addition to offensive operations, you will support customers through external attack surface analysis, exposure reconnaissance, integration of accounts and tools, preparation of monthly Red Team reports, and prioritization of customer requests. Daily collaboration with Vector Command operators is essential, as is maintaining awareness of new vulnerabilities, shifts in customer attack surfaces, and changes across customer environments.

About the Role

Your primary responsibility will be to support Vector Command customers by conducting external attack surface analysis, exposure reconnaissance, account and tool integrations, preparing monthly red team report deliverables, and prioritizing customer requests. You will work daily with Rapid7's Vector Command Red Team operators, assisting with ongoing red team exercises and staying up to date on the latest vulnerabilities, customer attack surface changes, and exposures within customer environments. Specifically, your focus will be to:

• Onboard customers to the Vector Command platform and technologies.
• Oversee and ensure the completeness of customer report deliverables.
• Serve as the primary point of contact for customer inquiries related to testing operations, alerts, or general Vector Command questions associated with Red Team activities.
• Coordinate and host monthly Vector Command Red Team update calls in conjunction with a Rapid7 Red Team lead.
• Translate technical concepts and communicate them effectively to non-security personnel.
• Coordinate communications between internal Rapid7 services on behalf of customers, including the Managed Detection and Response (MDR) and Managed Vulnerability Management (MVM) teams.
• Provide monthly written summaries of each customer's attack surface and Vector Command Red Team operations.
• Analyze each customer's exposures and attack surface within the Vector Command platform.
• Conduct manual network and service reconnaissance to identify new exposures.
• Perform Open-Source Intelligence (OSINT) gathering on customers to identify attack surface elements that extend beyond traditional network services.
• Keep the Red Team informed of significant changes in customers' attack surfaces.
• Coordinate customer requests and prioritizations with the Red Team operators.
• Develop scripts to query and analyze attack surface data from numerous sources and automated systems.
• Perform entry level penetration testing activities against external assets, as assigned by the Red Team lead.

The skills and qualities you'll bring include:

• 3+ years in an active technical security role.
• Knowledge of modern penetration testing tools and methods.
• Experience prioritizing customer success by putting client needs at the forefront of technical recommendations and investigative reporting.
• Knowledge of external attack surface reconnaissance techniques to identify customer's internet facing exposures.
• Strong knowledge of network, web-based application, and IEEE 802.11 security concepts.
• Knowledge of Windows/Linux/UNIX internals and the Internet protocol suite.
• Experience using scripting languages such as Python and PowerShell.
• Experience with social engineering techniques and tactics related to reconnaissance and OSINT gathering.
• Certifications such as CREST, GPEN, PJPT, PNPT, CPTS, or OSCP are preferred.
• Communicate in a clear manner that conveys objectives and rationale, fostering commitment from cross-functional partners.
• Collaborate effectively as a dedicated team player who supports peers, shares domain knowledge, and celebrates team achievements.
• Demonstrate a strong sense of ownership and commitment to the "end-to-end" testing process. Holds themselves and other accountable to driving value and customer outcomes from the initial pre-engagement planning to the final remediation phase.
• Embody our core values to foster a culture of excellence that drives meaningful impact and collective success.

We know that th