Associate Red Team Engineer - Remote

Overview

The Associate Red Team Engineer is responsible for advanced penetration testing and Cyber Security Tradecraft research to assess and enhance the security posture of the organization. This role necessitates a blend of deep technical expertise and strategic thinking ensuring that the organization stays ahead of potential cyber threats.

In Short

• Execute complex cyber security research assessments to analyze new TTPs, threats, malware and test efficiency of security controls and measures.
• Participate on complex red team engagements to simulate real-world cyber-attacks on the organization's infrastructure, applications, and data.
• Collaborate with blue teams to validate the effectiveness of defensive measures and improve detection and response capabilities.
• Utilize threat intelligence to inform red team activities, ensuring simulations reflect current and emerging threat landscapes.
• Conduct attack path mapping for threat modeling to identify, assess, and prioritize potential cyber threats and vulnerabilities.
• Produce detailed reports and presentations that articulate findings, vulnerabilities, and potential impacts to technical and non-technical stakeholders.
• Recommend actionable remediation strategies to mitigate identified vulnerabilities and improve overall security posture.
• Document red team methodologies, tools, and processes for knowledge sharing and continuous improvement.

Requirements

• Bachelor's degree in Computer Science, Information Security, or adequate experiences in the Offensive Security area.
• Minimum of 2 years of experience in cybersecurity and red team roles.
• Proven track record of executing red team engagements.
• Deep understanding of network protocols, operating systems, and security architectures.
• Proficiency in penetration testing tools and frameworks such as Metasploit, Burp Suite, and Cobalt Strike.
• Experience with scripting and programming languages such as Python, PowerShell, and Bash.
• Knowledge of threat modeling, vulnerability assessment, and risk management practices.
• Relevant industry certifications such as OSCP, OSCE, OSEP, CISSP, or GPEN.

Benefits

• Exciting work in a great team, global projects, international environment.
• Opportunity to learn and grow professionally within the company globally.
• Hybrid working model, flexible role pattern (e.g., even 80% full-time is possible in justified cases).
• Pension and health insurance contributions.
• Internal reward system plus referral program.
• 5 weeks annual leave, 5 sick days, 15 days of certified sick leave paid above statutory requirements annually.
• 40 paid hours annually for volunteering activities, 12 weeks of parental contribution.
• Cafeteria for tax free benefits according to your choice.
• Competitive salary, incentive pay, and many more.