Job details
Salary $100,000 a year job type full-time
Full job description
Company description
Fireeye is the intelligence-led security companyWorking as a seamless, scalable extension of customer security operations, fireeye offers a single platform that blends innovative security technologies, nation-state grade threat intelligence, and world-renowned mandiant® consultingWith this approach, fireeye eliminates the complexity and burden of cyber security for organizations struggling to prepare for, prevent, and respond to cyber attacksLearn more about fireeye`s world-class solutions and global footprint at https://www.fireeye.com/company.html.
Job description
A successful red team consultant at fireeye should possess a deep understanding of both information security and computer scienceThey should understand basic concepts such as networking, applications, and operating system functionality and be able to learn advanced concepts such as application manipulation, exploit development, and stealthy operationsThis is not a “press the ‘pwn’ button” type of job; this career is technical and challenging with opportunities to work in some of the most exciting areas of security consulting on extremely technical and challenging workA typical job could be breaking into a segmented secure zone at a fortune 500 bank, reverse engineering an application and encryption method in order to gain access to sensitive data, all without being detectedIf you can exploit at scale while remaining stealthy, identify and exploit misconfigurations in network infrastructure, parse various types of output data, present relevant data in a digestible manner, think well outside the box, or are astute enough to quickly learn these skills, then you’re the type of consultant we’re looking for.
At fireeye, you’ll be faced with complex problem solving opportunities and hands-on testing opportunities on a daily basisWe help our clients protect their most sensitive and valuable data through comprehensive and real world scenario testingThe objective doesn’t end at gaining “domain admin” or “root”; this is expected and is only a starting point.
You are expected to quickly assimilate new information as you will face new client environments on a weekly or monthly basisYou will be expected to understand all the threat vectors to each environment and properly assess themYou will get to work with some of the best red teamers in the industry, causing you to develop new skills as you progress through your careerAre you up to the challenge?
Responsibilities:
Perform network penetration, web and mobile application testing, source code reviews, threat analysis, wireless network assessments, and social-engineering assessments
Develop comprehensive and accurate reports and presentations for both technical and executive audiences
Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel
Recognize and safely utilize attacker tools, tactics, and procedures
Develop scripts, tools, or methodologies to enhance fireeye mandiant’s red teaming processes
Assist with scoping prospective engagements, leading engagements from kickoff through remediation, and mentoring less experienced staff
Qualifications
Requirements:
4-7 years` experience in at least three of the following:
Network penetration testing and manipulation of network infrastructure
Mobile and/or web application assessments
Email, phone, or physical social-engineering assessments
Shell scripting or automation of simple tasks using perl, python, or ruby
Developing, extending, or modifying exploits, shellcode or exploit tools
Developing applications in c#, asp, .net, objectivec, go, or java (j2ee)
Reverse engineering malware, data obfuscators, or ciphers
Source code review for control flow and security flaws
Strong knowledge of tools used for wireless, web application, and network security testing
Thorough understanding of network protocols, data on the wire, and covert channels
Mastery of unix/linux/mac/windows operating systems, including bash and powershell
Must be eligible to work in the us without sponsorship
Additional qualifications:
Ability to travel up to 20%
Ability to successfully interface with clients (internal and external)
Ability to document and explain technical details in a concise, understandable manner
Ability to manage and balance own time among multiple tasks, and lead junior staff when required
Additional information
At fireeye we are committed to our #oneteam approach combining diversity, collaboration, and excellenceAll qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.
Minimum salary: $100,000Final salary will be determined commensurately with cost of living, experience level, and/or any other legally permissible considerations.
Incentive compensation: eligibility for annual bonus subject to individual and company performance; eligibility for award of restricted stock units subject to eligibility requirements, approval from fireeye’s compensation committee, and vesting terms
Benefits: employer subsidized benefits include medical, dental, vision, life, and disability insuranceSubject to eligibility requirements, fireeye also offers the ability to participate in 401(k), flexible spending accounts, health savings accounts, dependent care spending accounts, and employee stock purchase programFireeye also provides paid time off, flexible paid sick time, and paid holidays.
Disclosure as required by sb19-085 (8-5-20)
