Penetration Tester

Level: Mid or Senior

Pay: $120,000 - $165,000

Location: Sandy Springs, GA

Skills: Red Team, Penetration Testing, OSCP, Infrastructure Engineering, Scripting and Programming, System Administration, Artificial Intelligence and Large Language Models,

Work for a high profile financial institution that is heavily tied to the US economy. Looking for a Penetration Tester / Red Team Operator. If you'd like to gain exposure to "cutting edge" security practices and can work in a fast-paced environment then this could be a good fit.

A Red Team operator is a member of the Information Security Assurance group driving security improvement through continuous assessment of our threat landscape. The Red Team is a globally dispersed “testing” team.

Team Duties

• Red Team Core (70%): primarily, as a Red Team operator, you will work closely with team members to deliver sophisticated engagements focusing on high priority, global security objectives. This will take the form of engagements that deliver chained exploits and a full kill-chain of specific recommendations, to demonstrate and explain security gaps in the context of other vulnerabilities. These engagements may include working with externally contracted red teams and exploring Artificial Intelligence based applications such as Large Language Models (LLMs).
• Threat Automation and Detection development (15%): you will be developing and recreating atomic red team tests (“TTPs”) not developed as part of Red Team Core duties. These will be used to improve our Blue Team detection and response capabilities.
• Infrastructure support and development (15%): you will run, support and maintain our red team-owned tools and infrastructure alongside other team members.

Responsibilities

Seniority is determined by experience and demonstration of exceptional competencies including:

• Documenting and effectively publishing technology guidance and repeatable processes
• Mentoring peers in groups and individually
• Improving processes and incorporating advanced methodologies into engagements
• Taking initiative to learn business goals, liaise with other departments, and identify ways to increase productivity in other ICE groups and offices

Knowledge and Experience

• University degree in Mathematics, Computer Science, Engineering, or related discipline
• Scripting, software engineering, and system administration
• Offensive Security Certified Professional (OSCP) qualification
• Artificial Intelligence background is a plus