Penetration Tester

CyberOne is hiring! We hire smart, talented and high-performing professionals to push our organization forward and provide superior service to our customers. We each take accountability for our work, strive to make each other better, and genuinely love what we do. If you value learning new things, being innovative, and working in a supportive, collaborative environment, CyberOne may be the place for you.

If you are ready to raise the bar for your career and be part of our exciting journey, we would like to hear from you!

Adversarial Engineers are experienced penetration testers with years of experience in testing various technologies. In this role, an Adversarial Engineer will be responsible for conducting high quality offensive security services. They must also be able to continually provide research or development projects back to the security community at large to aid in the overall brand of TeamARES and CyberOne, LLC.

Essential Functions

The Adversarial Engineer’s work can be divided into Project Management and Delivery, Offensive Security Development, and Cyber Security Research.

Project Management and Delivery

• Participate in discovery and analysis of client needs.
• Organize and lead offensive security services for clients of CyberOne.
• Execute internal, external, wireless, and web application penetration tests.
• Execute social engineering tests, including phishing, vishing, and physical.
• Develop technical solutions to help mitigate security vulnerabilities.
• Provide external training to clients of CyberOne Offensive Security. 

Development

• Develop tools to aid Team Ares, and the community, in conducting offensive security services research.
• Research and study security vulnerabilities from a multitude of products.
• Research and develop practical tools to protect native systems, including both host and network side defense.
• Collaborate with the security community in improving both offensive and defensive security methods and tools.
• Research and stay knowledgeable on paper/blog write-ups to share information with the community.
• Show familiarity with various network architectures, network services, system types, network devices, development platforms and software suites required (e.g. Linux, Windows, Cisco, Oracle, Active Directory, JBoss, .NET, etc.) 

Required Qualifications/Experience

• 2+ years performing penetration testing.
• Experience communicating and presenting technical information.
• Fluent knowledge of a scripting language (e.g. Python).
• Offensive Security Certified Professional (OSCP) or eLearnSecurity Certified Professional Penetration Tester (eCPPT).
• Excellent ability to define problems, formulate solutions, effectively collaborate and communicate, plan and execute.
• Knowledge around web applications and networking.

Preferred Qualifications/Experience

• Bachelors or Master’s degree in computer science or related engineering field.
• Offensive Security Certified Expert (OSCE).
• Vulnerability Research experience as well as experience reporting and publishing information around discovered vulnerabilities.

Skills/Abilities

• Work is performed indoors in a climate-controlled environment.
• Travel may be required up to 25%.
• May be required to work evenings, weekends to meet company and customer needs.
• Must be able to remain in a stationary position 50% of the time.
• Must be able to move about inside a professional office environment.
• An environment that empowers employees to contribute to an organization that embraces a fail-fast mentality.
• An open, supportive, and collaborative work environment.

If you are passionate, driven and ready to take your career to the next level, we invite you to apply today! 

CyberOne is a proud Equal Opportunity and Affirmative Action Employer. All qualified applicants, regardless of race, color, genetic information, national origin, religion or belief, sex, affectional or sexual orientation, gender identity or expression, immigration status, ancestry, age, marital status, disability, or protected veteran status, are encouraged to apply and will receive equal consideration based on merit, qualifications, and business need.

Recruitment Agencies Please Note:

"In accordance with our recruitment policy, CyberOne strictly prohibits any form of solicitation of our employees by external agencies or third parties. Any candidate information that may be received from such agencies or third parties shall be deemed as a voluntary gift and shall become the exclusive property of CyberOne. Exceptions to this policy apply only when an Agency/Third Party is an Authorized Vendor of CyberOne, holding a valid and current contract that has been duly signed by our People Services Manager or CFO of CyberOne. Under no circumstances will any payment be made to any Agency/Third Party unless they are an Authorized Vendor or possess written approval from the CyberOne People Services Manager or CFO, granting them explicit permission to engage in recruitment efforts on behalf of CyberOne."