Security Researcher

Security Joes is looking for a Security Researcher for our Red Team. You will be responsible for executing multi-layered projects, define work methodologies, maintain code repositories and internal tools used for the process of either penetration testing or red team activities and will be in continuous communication with our MDR and Incident Response team.

The team you will be part of are versatile global team of researchers with skills that span through exploit research, vulnerability management, penetration testing, malware analysis and reverse engineering. The team is well-known publicly, as well as the company, that released innovative and cutting-edge research papers along with responsible disclosures and threat intel reports detailing new and undocumented attacks and attackers.

Responsibilities:

• Red Team Day-to-day:
• Plan, develop, and lead Red Team engagements, orchestrating comprehensive simulated attacks to uncover vulnerabilities and enhance our clients' security posture.
• Conduct diverse exercises, including phishing simulations, internal and external penetration tests, lateral movement activities, and mobile/web pentests.
• Assess and bypass security mechanisms and identify weaknesses to recommend improvements.
• Utilize industry-standard vulnerability management tools like Tenable/Rapid7 or EDR/XDR products to collect vital information for clients to patch their systems.
• Thorough Reporting:
• Prepare in-depth reports documenting findings, methodologies, and actionable recommendations from Red Team engagements.
• Craft clear, concise, and compelling reports that effectively communicate identified vulnerabilities, attack vectors, and potential impacts to stakeholders.
• Ensure reports provide practical guidance to address vulnerabilities and strengthen overall security.
• Client Engagement and Presentation:
• Collaborate closely with clients to understand their specific security requirements and objectives.
• Responsively address client needs, providing regular updates on project progress and ensuring client satisfaction.
• Deliver engaging presentations, confidently sharing Red Team findings and recommendations to clients in a compelling manner.
• Knowledge of Vulnerabilities:
• Stay at the forefront of the industry, continuously expanding your knowledge of emerging threats, latest attack techniques, and known vulnerabilities.
• Maintain a track record of CVEs and reports on major vulnerabilities, contributing to the security community.
• Showcase your expertise by participating in conferences, writing technical blog posts, and actively engaging with the wider security community.
• Passion for Red Teaming:
• Fuel your genuine passion and enthusiasm for Red Team and penetration testing work, relishing the opportunity to discover vulnerabilities and enhance security.
• Exhibit a proactive mindset, always on the lookout for new attack vectors, and meticulously documenting your findings.
• Foster a culture of continuous learning, keeping up-to-date with the latest security trends and defensive strategies.

Requirements:

• Minimum of 2 years of experience as a Red Teamer / Penetration Tester or in a similar role, showcasing a strong background in offensive security simulations and penetration testing.
• Bachelor's degree in Computer Science OR Offensive Security certifications such as OSCP, OSCE, or other relevant certifications - an advantage.
• Demonstrated expertise in planning, executing, and documenting Red Team engagements, with a proven track record of uncovering vulnerabilities and providing valuable insights.
• Excellent communication skills in English, both written and verbal, with the ability to convey complex technical concepts to both technical and non-technical stakeholders.
• Strong problem-solving skills and a creative mindset to identify attack vectors and devise innovative strategies.
• Passion for continuous learning and a desire to stay updated with the latest attack techniques, defensive strategies, and industry trends.

Security Joes is a leading provider of MDR (Managed Detection & Response) including high-end Incident Response (IR) and forensics investigations, red team activities, adversary simulations and tailored security project. Experts from around the world, unlimited to location, language or culture are part of our highly skilled team and we are constantly looking to grow.

Apply today to get a unique opportunity to join the JOES!