*Remote if in: IL, TX, FL, GA, MA, MD, MN, NC, NJ, NY, DC, WI or in office Chicago, IL/Dallas, TX*

A prestigious company is looking for an Associate Principal, Red Team Tester. This tester will plan, design, and execute security red teaming. These Red team activities include Intelligence Gathering, Network/Operating System/Application Penetration Testing, Web Application Penetration Testing, Mobile Application Testing, Social Engineering, Basic Emissions/Signals Testing, Physical Security Testing, Command and Control (C2) Infrastructure Development, Cyber Defense Evasion Stealth techniques, etc.

Qualifications:

• BS in Computer Science, Information Management, Information Security or other comparable technical degree from an accredited college/university desired.
• 3+ Years' experience of Penetration testing
• 5+ Years' experience in Information Assurance or Information Security environment.
• Strong proficiency in Network, Web Application, and Mobile Device security testing
• Demonstrated exploit, payload, and attack framework development experience
• Strong knowledge of EDR detection capabilities such as Crowdstrike/Carbon Black, etc. and associated defense evasion techniques for behavioral based alerting
• Strong proficiency in social engineering and intelligence gathering.
• Strong experience with custom Scripting (Python, Powershell, Bash, etc.) and process automation.
• Strong experience with database security testing (MSSQL, DB2, MySQL, etc.).
• Strong proficiency with common penetration testing tools (Kali, Armitage,
• Conduct various Red Team activities such as: Intelligence Gathering, Network/Operating System/Application Penetration Testing, Web Application Penetration Testing, Mobile Application Testing, Social Engineering, Basic Emissions/Signals Testing, Physical Security Testing, Command and Control (C2) Infrastructure Development, Cyber Defense Evasion Stealth techniques, etc.
• Conduct ad-hoc white-box penetration testing work of company infrastructure that is still currently in Development, or in need of pre-Production penetration testing
• Research and execute Cyber Defense Evasion techniques to help enhance Cyber Defense monitoring/alerting capabilities
• Build Command and Control (C2) infrastructure, and obfuscate the C2 network traffic and payloads to avoid detection by the Cyber Defense team
• Coordinate with IT owners to re-test and validate remediated Red Team findings
• Execute Open Source Intelligence Collection and Analysis Techniques (OSINT); leverage available resources and develop custom tools.
• Understand vulnerabilities and develop relevant exploits/payloads for use during Red Team activities.
• Perform security risk assessment, threat analysis and threat modelling.
• Assist management with the improvement of policies and procedures to support Security Testing and Red Team activities as well as other security duties which may arise.