Senior Red Team Engineer

We are looking for: A Senior Red Team Engineer. Do you think like an adversary, love to break into systems and enjoy exploiting networks? Want the opportunity to travel the world? If so, you will thrive in this client-facing role alongside our skilled operators on our Red Team. The Red Team provides the Opposing Force (OPFOR) during tests, training and exercises, and will leverage the latest tools, tactics and techniques to simulate sophisticated adversaries to identify and expose weaknesses in security defenses for our customers.

What will you be doing as a Senior Red Team Engineer at SimSpace?

• Develop, plan, and execute simulated attacks against an organization’s systems, applications, and networks, using tactics, techniques, and procedures (TTPs) commonly used by real-world threat actors.
• Identify weaknesses in an organization’s security controls, including vulnerabilities, misconfigurations, and gaps in processes and procedures.
• Continuously research, develop, and improve on tactics and techniques to keep up with the evolving threat landscape, and share knowledge to enhance the overall capability of the team.
• Travel the globe to be onsite with clients, guiding them through live events and educating them. 
• Test and rehearse threats and tools prior to an engagement and coordinate with other Red Teamers to successfully achieve the specified goals.
• Assume the role of the adversary during tests, training and exercises and actively engage with defenders who will be working to repel you out of their network.
• Collaborate with other Red Teamers, developers, and vulnerability researchers to prioritize tool development.
• Skillfully communicate and develop mission debriefs on the success and failures of threats to stakeholders, including technical staff, management, and executives, using clear and concise language.
• Propose improvements for identified security weaknesses, such as enhanced technical measures, updated policies, and actions to bolster the organization’s defense.
• Must maintain the confidentiality of the engagement, follow ethical standards and legal regulations, and act in the best interest of the organization at all times.

What are the qualifications to apply? To be successful as a Senior Red Team Engineer, you need to have:

• A robust technical background, including knowledge of operating systems (Windows, Linux, etc.), networking (communication protocols), programming languages (Python, C#, etc.), and security tools (Crowdstrike, McAfee, Security Onion, Splunk, etc.).
• Experience in a client-facing role, and the ability to present and speak to large groups.
• A full grasp of current cybersecurity risks, such as common attack strategies and cybercriminal behavior. Should be acquainted with well-known hacking tools like Cobalt Strike, Metasploit, Empire, Pupy, among others.).
• A commitment to continuous learning and staying up to date with the latest technologies, tools, and techniques in the cybersecurity field.
• The ability to think critically, creatively and be able to identify weaknesses in complex systems and environments.
• A solid understanding of exploitation and ability to develop or modify tools & exploit proof of concepts (PoCs) to function with newly introduced defensive countermeasures.
• A deep work ethic by being self-motivated, disciplined, and able to work autonomously or as part of a team, often in high-pressure and time-sensitive environments.
• The ability to communicate effectively with both technical and non-technical stakeholders and be able to explain technical concepts in a clear and concise manner.
• A strong ethical mindset and be committed to acting in the best interest of the organization while conducting red team operations.
• Experience with virtualization solutions.
• Ability to travel approximately 50% of the year.
• United States citizenship is required for this position.