Job details
Job type full-time
Full job description
Date posted:
2021-08-23-07:00
Country:
United states of america
Location:
Hdc99: field office - dc 123 remote drive, remote city, dc, 20001 usa
Raytheon technologies corporation is an aerospace and defense company that provides advanced systems and services for commercial, military and government customers worldwideIt comprises four industry-leading businesses – collins aerospace systems, pratt & whitney, raytheon intelligence & space and raytheon missiles & defenseIts 195,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurityThe company, formed in 2020 through the combination of raytheon company and the united technologies corporation aerospace businesses, is headquartered in waltham, massachusetts.
To realize our full potential, raytheon technologies is committed to creating a company where all employees are respected, valued and supported in the pursuit of their goalsWe know companies that embrace diversity in all its forms not only deliver stronger business results, but also become a force for good, fueling stronger business performance and greater opportunity for employees, partners, investors and communities to succeed.
Lead red team penetration tester
Raytheon technologies corporate headquarters
Job description
Raytheon technologies is seeking a highly qualified and motivated individual to join the cybersecurity intelligence and assessment group to conduct red team operations and generate associated vulnerability assessments.
The red teamer must be able to plan, communicate, coordinate, and conduct red team activities, penetration tests, and security assessments for applications, systems and enterprise networks while adhering to strict rules of engagement and ethical cyber operational behavior.
Job responsibilities include
Perform application and infrastructure penetration tests, as well as physical security review and social engineering tests
Conduct hands-on technical testing beyond automated tool validation, including full exploitation and leveraging of access within multiple environments, such as windows or *nix; conduct scenario-based security testing or red teaming to identify gaps in detection and response capabilities
Perform security reviews of application designs, source code, and deployments as required, covering all types of applications (web application, web services, mobile applications, thick applications, saas)
Performs penetration testing using standard penetration tools (metasploit, nmap, nessus, burp suite, etc.)
Perform information technology security research to remain current on emerging technology trends and develop exploits for disclosed and undisclosed vulnerabilities
Contributes to developing and implementing tools for penetration testing and early warning of weaknesses or possible incidents building on methodologies as promulgated by nist, iso, etcTo ensure useful, measurable, and repeatable methods applied to quantifying risk
Selects, installs, and configures security testing platforms and tools or develop tools and procedures for penetration tests
Provide regular risk briefings to senior management on findings and develop remediation approaches and recommendations to improve cybersecurity posture
Experience/qualifications
Bachelor`s degree or equivalent experience and 7+ years additional relevant work experience in an environment that supports integrated risk management preferred
7+ years of experience in security with practice in penetration testing and vulnerability assessments
Strong active directory background, evaluating trust domains, kerberoasting
Experience with web and mobile applications, databases, operating systems
Experience in penetration testing large and complex enterprise networks and cloud environments
Experience with utilizing penetration testing framework such as mitre att&ck & owasp
Hands-on os configuration/administration experience
Skilled in conducting non-attributable research using all available sources, including social network analysis
Programming experience with focus on penetration testing or process automation
High degree of experience with the following technologies:
Cobalt strike, kali linux
Powershell, c#, ghostpack, bloodhound
Metasploit
Nmap, burp suite
Excellent communication and interpersonal skills
Education: typically requires a university degree or equivalent experience and minimum 7 years prior relevant experience or an advanced degree in a related field and minimum 5 years experience.
Mba preferred.
Industry accreditations are preferred (itil)
Location:
Remote or any us rtx location
Required status:
Us citizen or us person required as work may involve visibility to itar related projects.
Desired certifications (one or more desired)
Oscp, osce, oswe, ceh, sans, cissp
Raytheon technologies is an equal opportunity/affirmative action employerAll qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.
Privacy policy and terms:
Click on this link to read the policy and terms
Raytheon technologies is an equal opportunity/affirmative action employerAll qualified applicants will receive consideration for employment without regard to race, age, color, religion, creed, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.
