Red Team Engineer

Responsibilities:

• Red Teaming: Participate in full-scope red team engagements, simulating real-world attack scenarios to assess the effectiveness of our security defenses. This includes social engineering, physical security assessments, and evasion techniques.
• Network Penetration Testing: Conduct comprehensive penetration tests on networks, including internal and external infrastructure, and cloud environments, employing a variety of methodologies).
• Operation System Exploitation:Perform in-depth analysis and exploitation of vulnerabilities within Windows, Linux, and other operation systems.
• Exploit Development:Develop and utilize custom exploits to validate vulnerabilities and demonstrate potential impact.
• Reporting:Create clear, concise, and actionable reports detailing identified vulnerabilities, attack vectors, and remediation recommendations.
• Collaboration:Work closely with Blue Team members and other security professionals to improve Lightedge’s overall security posture.
• Tooling:Maintain and improve a suite of penetration testing tools and frameworks.

Education and Experience:

• Educational Background: Bachelor’s degree in Computer Science, Information Security, or a related field. Equivalent experience will be considered.
• Red Team or Penetration Testing Experience: At least 5 years of experience in a security role with a focus on network penetration testing and red teaming.
• Technical Expertise:
• Strong proficiency with network penetration tools such as Metasploit, Kali Linux, Burp Suite (for API testing where applicable), Cobolt Strike.
• Extensive knowledge of scripting languages including Python and Powershell
• Proficient in networking protocols (TCP/IP, DNS, etc), operating systems (Windows, Linux, MacOS), and security technologies (firewalls, IDS/IPS).
• Networking Proficiency: Strong understanding of network architecture and security principles. Experience with packet analysis and network traffic manipulation.
• Attack Frameworks: Experience with various attack frameworks (MITRE, Cyber Kill Chain, etc). Networking mapping techniques.
• Threat Hunting: Knowledge of threat hunting tools to discover IoCs and TTPs.
• Cloud Security: Familiarity with cloud security best practices (AWS, Azure), network configuration of these platforms, Security Groups and IAM policies.
• Soft Skills
• Excellent communication and interpersonal skills
• Strong documentation skills
• Strong analytical and problem-solving abilities.
• Applicants must be authorized to work in the United States without the need for visa sponsorship now or in the future.
Preferred Qualifications:
• One or more industry relevant certifications such as OSCP, GPEN, CEH.
• Experience with malware analysis
• Experience with reverse engineering.
• Experience with exploit development.