Job details
Job type full-time
Full job description
Telophase seeks a senior penetration tester/red team lead to head our cybersecurity red teamThe red team lead shall lead red versus blue engagements (purple team exercises) with defenders who will be working to repel the adversary from their networkThe team objective focuses on detecting and mitigating vulnerabilities for various network systems.
Specific duties for this position may include the following:
As lead, assume the role of multiple adversaries to present varying levels of threat to perform attack simulations in telophase customer environments.
Develop attack plans to meet customer specified objectives and provide sufficient engagement to challenge the blue team defenders.
Test and rehearse the telophase attack techniques and tools in telophase microsoft azure and aws cloud environments.
Test and rehearse the telophase attack techniques and tools prior to customer engagements to better ensure sufficient level of success.
Develop and deliver debriefs to identify the success or failure of each attack while providing constructive feedback to the defenders on areas where they may improve.
Strategize and coordinate with other telophase red team operators to deconflict attacks and achieve the collective objectives.
Constantly research and refine tactics and techniques to bolster telophase team capabilities.
Automate attack sequences for use in diverse training venues.
Develop, test and deploy custom attack tools designed to fill specific telophase red team needs.
Conduct cloud-based and on-premise penetration testing, wireless penetration testing for on-premise, phishing, reverse engineering exploits, log analysis, operation of assessment tools, and script writing.
Leverage mitre att&ck framework for telophase red team exercises.
Conduct network mapping, vulnerability scanning, web application testing.
Required qualifications:
High familiarity with offensive security tools and frameworks such as cobalt strike, metasploit, scythe, burpsuite, owasp, mimikatz, c2 frameworks, etc.
5-10+ years of experience in commercial and federal (bonus) sectors performing red team exercises.
Experience as lead in red team engagements for customers.
Skills and requirements:
Experience with python and c# scripting preferred.
Oscp or related offensive security industry certifications highly preferred.
Familiarity with nist 800-53 revision 4 (and 5) security controls catalog.
Ability to work for us under any employer and ability to obtain a secret level security clearance.
Remote work availableTelecommuting options are available outside dc metro region.
As an equal opportunity employer, it is telophase’s policy to recruit, hire, and provide opportunities for advancement in all job classifications without regard to race, color, religion, sex, national origin, age, citizenship, marital status, sexual preference, parental status, or disability.
Job type: full-time
Work location: multiple locations
