Senior Security Researcher

Security Joes is looking for a Senior Security Researcher for our Red Team. You will be responsible for executing multi-layers projects, define work methodologies, maintain code repositories and internal tools used for the process of either penetration testing or red team activities.

You will also be part of a versatile team with skills that span through exploit research, vulnerability management, penetration testing and reverse engineering software.

Responsibilities:

• Red Team Leadership:
• Plan, develop, and lead full-scale Red Team engagements, orchestrating comprehensive simulated attacks to uncover vulnerabilities and enhance our clients' security posture.
• Conduct diverse exercises, including phishing simulations, internal and external penetration tests, lateral movement assessments, and mobile and desktop pentests.
• Assess and bypass security products to identify weaknesses and recommend improvements.
• Utilize industry-standard vulnerability management tools like Tenable/Rapid7 or EDR/XDR products.
• Thorough Reporting:
• Prepare in-depth reports documenting findings, methodologies, and actionable recommendations from Red Team engagements.
• Craft clear, concise, and compelling reports that effectively communicate identified vulnerabilities, attack vectors, and potential impacts to stakeholders.
• Ensure reports provide practical guidance to address vulnerabilities and strengthen overall security.
• Client Engagement and Presentation:
• Collaborate closely with clients to understand their specific security requirements and objectives.
• Responsively address client needs, providing regular updates on project progress and ensuring client satisfaction.
• Deliver engaging presentations, confidently sharing Red Team findings and recommendations to clients in a compelling manner.
• Knowledge of Vulnerabilities:
• Stay at the forefront of the industry, continuously expanding your knowledge of emerging threats, latest attack techniques, and known vulnerabilities.
• Maintain a track record of CVEs and reports on major vulnerabilities, contributing to the security community.
• Showcase your expertise by participating in conferences, writing technical blog posts, and actively engaging with the wider security community.
• Passion for Red Teaming:
• Fuel your genuine passion and enthusiasm for Red Team and penetration testing work, relishing the opportunity to discover vulnerabilities and enhance security.
• Exhibit a proactive mindset, always on the lookout for new attack vectors, and meticulously documenting your findings.
• Foster a culture of continuous learning, keeping up-to-date with the latest security trends and defensive strategies.

Requirements:

• Minimum of 7 years of experience as a Red Teamer or in a similar role, showcasing a strong background in offensive security and penetration testing.
• Bachelor's degree in Computer Science OR Offensive Security certifications such as OSCP, OSCE, or other relevant certifications highly desired.
• Demonstrated expertise in planning, executing, and documenting Red Team engagements, with a proven track record of uncovering vulnerabilities and providing valuable insights.
• Excellent communication skills in English, both written and verbal, with the ability to convey complex technical concepts to both technical and non-technical stakeholders.
• Strong problem-solving skills and a creative mindset to identify attack vectors and devise innovative strategies.
• Passion for continuous learning and a desire to stay updated with the latest attack techniques, defensive strategies, and industry trends.

Security Joes is a leading provider of MDR (Managed Detection & Response) including high-end Incident Response (IR) and forensics investigations, red team activities, adversary simulations and tailored security project. Experts from around the world, unlimited to location, language or culture are part of our highly skilled team and we are constantly looking to grow.

Apply today to get a unique opportunity to join the JOES!