Offensive Security – Staff Specialist

Cyber Advisors (CA) is a rapidly growing Cybersecurity Consulting firm and MSP. We are seeking a Staff Specialist for our Offensive Security team, to support our accelerating company growth and the equally important growth of one’s own career. CA believes in inclusion and is dedicated to continued employee development. We offer a competitive salary and benefits and want candidates who focus on innovation and results. Successful CA employees are detail oriented and have excellent communication skills. The successful candidate will be a creative problem-solver with the ability to structure and order assignments efficiently. Candidates should apply to become part of a forward-thinking team that values your contributions and well-being

The successful candidate will have a proven track record of leading and executing penetration tests, performing threat/adversary emulation within a passionate offensive security team and executing tactical, offensive assessments.

This role will report to an offensive security team manager, with headquarters located in Minneapolis, MN. This position is 100% remote and while Minnesota-based is preferred, we will absolutely consider remote candidates located in the United States.

Primary Responsibilities

• Perform scoped and open-ended assessments on internal and external facing systems.
• Perform threat and vulnerability research to identify new ways of achieving the program’s mission and act as a source for innovation within the cybersecurity industry.
• Assisting in the sales process with potential or existing clients and acting as a client’s primary program contact for projects delivered by Cyber Advisors security team.
• Develop and implement processes and/or tools that assist with execution of security assessments, including custom tools and automation.
• Work with the customer Blue Team to identify gaps, address findings, and improve breach response.

Required Experience

• At least 7 years of progressively responsible experience performing network and application security assessments and/or Red Team operations.
• Prior experience should include one or more of the following:
  • Executing application and/or network penetration tests
  • Executing Red Team or Threat Emulation assessments
• Work collaboratively with a variety of internal and external stakeholders (security consultants, project managers, service managers, development teams, technical SME’s, vendors) to deliver high quality assessments.
• Strong understanding of one or more of the following:
  • Networking fundamentals (all OSI layers, protocols, etc.)
  • Windows/Linux/Unix operating systems
  • Operating system and software vulnerabilities and exploitation techniques
  • Web and mobile application vulnerabilities and exploitation techniques
  • Malware packing, obfuscation, persistence, exfiltration techniques
  • Security technologies such as Firewalls, IDS/IPS, Web Proxies and DLP amongst others
  • Commercial or open-source offensive security tools for reconnaissance, scanning, exploitation and post-exploitation (e.g. Nmap, Nessus, Metasploit, Burp Suite, etc.)
  • Project management

• Developing in-house tools or scripts to improve delivery and facilitate testing operations.
• Demonstrated leader with team-oriented interpersonal skills, with the ability to interface effectively with executive leadership, IT management, and technology vendors.
• Ability to collaborate and build positive relationships across multiple stakeholders.
• Agile thinking and analysis that leads to win-win and innovative solutions.
• Strong written and verbal communication skills.
• Calmness and clarity of thought under pressure and ability to maintain confidentiality.
• Ability to prepare and present project ideas and proposals to senior management.
• Understanding of financial sector, or other large organization, security and IT infrastructures.
• Willingness to work non-standard hours, if necessary.
• Excellent oral and written communication skills.

Preferred Experience

• Experience in the penetration testing/cyber security industry
• Bachelor's degree in business or related field preferred but not required.

Salary Range

The salary for this position is negotiable and based on experience. Factors which may affect pay include geography/market, skills, education, experience, and other qualifications of the successful candidate.

Travel

Limited, but depends on project requirements.

Compensation / Benefits:

- Competitive salary depending on skills and experience.

- Vacation and PTO.

- Employer-paid Health and Dental Insurance for CA employees.

- Great opportunities for career advancement

- 401k with employer matching day one

- Disability and Life Insurance

- Bonuses eligible

About Cyber Advisors:

Cyber Advisors' culture is like no other. First and absolutely foremost, we believe in taking care of our employees and their families. Whether we are blowing off steam at Top Golf, gathering for a fun summer family picnic, or hosting sales –vs- engineering paintball war, we play just as hard as we work. We believe good things come to those who sweat.