WHAT IS BOX?
 
Box is the market leader for Cloud Content Management. Our mission is to power how the world works together. Box is partnering with enterprise organizations to accelerate their digital transformation by creating a single platform for secure content management, collaboration and workflow. We have an amazing opportunity to further establish ourselves as leaders in the space, and we need strong advocates to help us achieve that goal. 

By joining Box, you will have the unique opportunity to help capture a majority of this developing market and define what content management looks like for the digital enterprise. Today, Box powers over 97,000 businesses, including 70% of the Fortune 500 who trust Box to manage their content in the cloud. 

WHY BOX NEEDS YOU 
The Red Team Engineer will provide adversarial services to include engaging in various operations of different complexity and length to test security architecture, security tools, configurations and SIRT response to incidents. The Red Team Engineer will also partners with Blue Team members to Purple Team test security tools and detections. This role will have the opportunity to collaborate across Box as a whole, providing expertise and real world adversarial group experience to product, architecture and operational teams at Box.

WHAT YOU'LL DO 
Responsibilities: 
<ul>
<li>
Consult on, design, and execute adversary emulation operations
</li>
<li>
Conduct research into real-world threat actor tactics, techniques, and procedures to develop proof-of-concept tools and playbooks
</li>
<li>
Partner with the SIRT and other stakeholders in the organization to identify security posture improvement opportunities
</li>
<li>
Collaborate with the Threat Operations Team (Threat Intelligence, Detection, and Threat Hunting) on threat analysis and research
</li>
<li>
Present findings and operational work to groups in a clear and professional manner
</li>
<li>
Study the techniques of Threat Actors, and apply that lens to operational work
</li>
</ul>

WHO YOU ARE 
Experience: 
<ul>
<li>
Minimum five (5) years of experience of operating in a technical red team or pen tester capacity
</li>
<li>
Bachelor's degree in Information Technology, related discipline or relevant work experience 
</li>
<li>
Relevant Technical Security Certifications (GIAC, EC-Council, Offensive Security, etc) 
</li>
<li>
Familiarity with MITRE ATT&amp;CK and how it’s applied by both Red and Blue Teams
</li>
<li>
Project management, cross-team coordination and driving organizational change
</li>
<li>
3+ years experience in the following areas:
</li>
<ul>
<li>
Network penetration testing and manipulation of network infrastructure
</li>
<li>
Mobile and/or web application assessments
</li>
<li>
Email, phone, or physical social-engineering assessments
</li>
<li>
Shell scripting or automation of simple tasks using Perl, Python, or Ruby
</li>
<li>
Developing, extending, or modifying exploits, shellcode or exploit tools
</li>
<li>
Source code review for control flow and security flaws
</li>
<li>
Bypassing preventative and detective security controls to accomplish operational goals
</li>
</ul>
<li>
Strong knowledge of tools used for wireless, web application, and network security testing
</li>
</ul>

Skills:
<ul>
<li>
Nominal understanding of regular expression and proficient in programming (.NET, C/C++) and scripting languages (e.g. Perl, Java, or Python) 
</li>
<li>
Familiarity with common C2 frameworks such as Cobalt Strike, Mythic, and Metasploit
</li>
<li>
High level of proficiency of Linux/Mac/Windows operating systems, including bash and Powershell
</li>
<li>
Detailed understanding of the TCP/IP networking stack, network technologies and covert channels
</li>
<li>
Strong knowledge of full packet capture PCAP analysis and accompanying tools (Wireshark, etc.) 
</li>
<li>
Strong collaborative skills and proven ability to work in a diverse global team of security professionals 
</li>
<li>
Strong organizational skills and mentoring 
</li>
<li>
Comfortable with presenting to technical and executive level audiences
</li>
<li>
Strong verbal and written skills 
</li>
<li>
Excellent interpersonal skills 
</li>
</ul>
BENEFITS
<ul>
<li>Visit this webpage to check out all of our exciting healthcare benefits: <a href="https://join.collectivehealth.com/box?planYear=2020" rel="noopener noreferrer nofollow ugc" target="_blank">https://join.collectivehealth.com/box</a></li>
<li>For all other benefits, please check out: <a href="https://cloud.box.com/s/3u38zhdv4gac9h0j7lmumm7arbe14yqa" rel="noopener noreferrer nofollow ugc" target="_blank">Box Benefits + Perks</a> </li>
</ul>
EQUAL OPPORTUNITY
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. Box strives to respect the dignity and ‎‎independence of people with disabilities and is committed to giving them the same ‎‎opportunity to succeed as all other employees. Accommodations are available ‎throughout ‎the application process and an employee’s employment at Box.

HEALTH AND SAFETY
To promote the health and safety of all Boxers and our communities, in order to "Go to Work" at Box in the U.S., you must be Fully Vaccinated or have an approved accommodation. "Go(ing) to Work" at Box is defined as visiting a Box office, facility, or co-working site, visiting or meeting in person with fellow Boxers, Box clients and/or customers, vendors, or partners, engaging in business travel, and or participating in any Box-sponsored and/or related activity where others are present.  If you are fully remote and do not "Go to Work,” the vaccination requirement is not applicable.  "Fully Vaccinated" means that an individual is at least two weeks past their final dose of an authorized COVID-19 vaccine regimen.  If you are unable to get a vaccine due to a medical condition, a sincerely-held religious belief or another legally recognized reason, Box will consider requests for an accommodation.
  
For details on how we protect your information when you apply, please see our <a href="https://cloud.app.box.com/v/BoxPersonnelPrivacyNotice" rel="noopener noreferrer nofollow ugc" target="_blank">Personnel Privacy Notice.</a>
 
#LI-Remote #LI-MG2

Senior Red Team Engineer

Fivesky

Do you consider yourself an expert in application, data, and infrastructure architecture? Are you a strategic thinker? Do you have a passion for business strategy and processes? Then you could be Fivesky’s next Cybersecurity Architect.
What you'll do:
<ul>
<li>Provide simplified, secure, and automated control patterns.</li>
<li>You will be involved all the way through, ensuring the right threats are identified with corporate threat intelligence teams</li>
<li>Co-working with the architects to design effective control solutions and testing them to destruction in lab and dev environments to ensure the control patterns actually deliver against expected outcomes.</li>
<li>Collaborate with internal teams and business leaders alike, creating strategically sound and validated Target State Architectures. Your work will have a tremendous and positive impact, whether it’s in-house, in collaboration with technologists global technology community, or in partnership with some of the most important tech firms in the world.</li>
</ul>
What we are looking for from you:
<ul>
<li>Fluent in architecture and design across all systems</li>
<li>Knowledge in at least one area of technical architecture</li>
<li>Strategic thinking and passion for business strategy and business processes</li>
<li>Experience in risk and risk control compliance</li>
<li>Ability to work collaboratively in teams and develop meaningful relationships to achieve common goals6+ year background of technical excellence across 2 of the following: Red Team exercises, Penetration testing, Exploit identification &amp; mitigation</li>
<li>Expertise in objective oriented penetration exercises</li>
<li>Detailed ability to work through technical system designs &amp; implementations to identify weaknesses</li>
<li>Experience reporting business relevance and the likelihood of attack scenario impacts</li>
</ul>
 It'll be good if you have:
<ul>
<li>Experience with Networking fundamentals (all OSI layers, protocols), Windows/Linux/Unix or Mac operating systems</li>
<li>Cloud-based systems (IaaS and PaaS in private or public environments), their configuration, and interactions, OS and software vulnerability and exploitation techniques, commercial or open-source offensive security tools for reconnaissance, scanning, exploitation and post-exploitation (e.g. Cobalt Strike, Metasploit, Nmap, Nessus, Burp Suite)</li>
</ul>
At Fivesky, our employees are our greatest asset and the focal point around which we operate; therefore, we always want the best for our employees. In addition to offering competitive compensation plans and long-term career opportunities, we offer an attractive mix of benefit plans to our employees that include provisions for vacation, holiday pay, and sick days.
Fivesky is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, genetic information, or any other characteristic protected by law.
This is a full-time, direct employment opportunity in Houston, TX. The salary is open based on experience and qualifications.
FS-RID-0547

Cybersecurity Architect (Pen Testing)

Houston

BreachLock

BreachLock is looking for New York based Penetration Testing talent with programming skills. We have multiple positions open for passionate bug bounty hunters or penetration testers that also like developing security tools using python or other technologies.Who are we? BreachLock is a remote first security startup that offers a unique SaaS platform delivering on-demand, continuous, and scalable security testing suitable for modern cloud and DevOps powered businesses. BreachLock is also World’s first full stack PTaaS powered by Certified Hackers and AI. We are a young and international startup with offices in Amsterdam, New York, London and New Delhi. Some of our achievements include: <ul> <li>Featured in Gartner HypeCycleas top 8 PTaaS Vendor Globally</li> <li>One of the fastest-growing SaaS companies in Cyber Security.</li> <li>HOT 150 Cybersecurity companies 2021 - Cybersecurity Ventures.</li> <li>Cyber Security Innovator for Analysis and Testing category 2019 – SC Magazine.</li> <li>Top 10 Vulnerability Management Solution for 2019 – Enterprise Security Magazine.</li> <li>Most promising Cyber Security startup 2019 – CIO Review.</li> <li>Cyber Security Innovator for the year 2019 – Mirror Review.</li> <li>Top 10 Vulnerability Assessment vendor in Gartner Peerinsight</li> </ul>ResponsibilitiesAs a Senior Penetration Tester, you will be on the front lines with our clients supporting them with their cloud and Offensive Security needs. You will work with our Offensive Security team to build attack-oriented professional services practice such as (but not limited to): Red/Purple Team Operations, Penetration Testing, Breach and Attack Simulations, Cloud Penetration Testing, Social Engineering, and a variety of ad-hoc custom assessments to address unique information security concerns for clients. In this role you will:<ul> <li> Drive Practice development, including improving existing offerings, creating new offerings, and mentoring team members</li> <li> Foster client relationships from Sales to Renewal Cycle by providing right solutioning, support, information, and guidance</li> <li> Support the teams on proposals, whitepapers, proof of concepts, technical eminence materials and firm initiatives.</li> <li> Perform Red Team Assessments, Purple Team Assessments, Network Penetration Tests, Wireless Security Assessments, Onsite and Remote Social Engineering, and a variety of custom assessments</li> <li> Create and review comprehensive assessment reports that are technical and managerial to describe the engagement, scope, risks, and remediation recommendations</li> </ul><ul> <li> Provide technical and administrative oversight and guidance to junior members of the team while performing technical operations</li> <li> Liasioning between technical teams and executive level professionals to relay relevant testing results and findings</li> <li> Develop marketing materials and participate in marketing activities such as creating research, speaking at conferences, authoring materials and presenting thought leadership</li> <li> Expertise on security testing frameworks and standards such as OSSTMM, OWASP, NIST SP 800-115, and MITRE ATT&amp;CK is required</li> <li> Use automation, orchestration, and scripting to reduce manual processes, improving overall efficiency while also enabling new capabilities to meet the rapidly changing needs of our clients</li> <li> Mastery of commercial and open source security tools including, but not limited to: Nmap, Nessus, BurpSuite, Cobalt Strike, Metasploit, Wireshark, and Aircrack-ng</li> <li> Serve as a subject matter expert on cloud cyber risk for at least one of the leading cloud platforms preferably AWS, Microsoft Azure/ Office 365.</li> <li> Support and enable junior team members across both technical and management leadership capacities.</li> <li> Provide internal cloud security technical training to Advisory personnel as needed.</li> </ul>RequirementsWhat we are looking for:<ul> <li> · 6+ years combined in IT and information security experience· 5+ years of experience performing offensive/attack-oriented security assessments including penteration testing· 2+ years of experience in an enterprise-level customer facing role· Experience with various public cloud components and architectures with Azure / AWS strongly preferred.· Experience in evading security detection controlsAdditional Requirements:· Ability to travel if needed, based on the work you do and the clients and industries/sectors you serve.· Must be legally authorized to work in the Netherlands without the need for employer sponsorship, now or at any time in the future. · Experience with leading multiple distributed teams across different geographies.· Excellent teamwork and interpersonal skills.Preferred:· Prior experience working with Big-4s in similar role· Experience in creating a vision and authoring the design of cyber programs and methodologies· Experience teaching and certifying personnel to achieve goal-oriented training objectives· Other lab-based certifications such as OSCP, OSCE, GIAC, and GSE are preferred· Other relevant industry certifications, such as GPEN and GCIH· InfoSec community involvement, such as conference speaking, blog/whitepaper authoring, and podcast speaking/producing· Experience building security tool APIs and/or services.· Experience building/automating Red Team Infrastructure.· Experience building/automating Attack Defense labs· Previous Consulting or Big 4 experience preferred.· Certifications such as: CISSP, AWS/Azure Security/DevOps/Professional Certifications, completion of Red Teaming Labs· Excellent writing and verbal communication skills.· Strong project management and organizational skills.· Knowledge of business process, user provisioning process, and security maintenance processes.</li> </ul>Benefits<ul> <li>Opportunity to join and grow in a passionate, rapidly expanding industry</li> <li>Competitive compensation</li> <li>Ability to work remotely</li> <li>Equity plan possibilities based on performance</li> <li>Flexible work hours</li> <li>You will be working alongside international experts</li> <li>Strong career prospects in an early-stage startup</li> </ul>

Amsterdam

Senior Penetration Tester / Pen Test Leader (Netherlands) - Amsterdam

Optiv

At Optiv, we’re on a mission to help our clients make their businesses more secure. We’re one of the fastest-growing companies in a truly essential industry. Join us.In your role at Optiv, you’ll be inspired by a team of the brightest business and technical minds in cybersecurity. We are passionate champions for our clients and know from experience that the best solutions for our clients’ needs come from working hard together. As part of our team, your voice matters, and you will do important work that has impact, on people, businesses, and nations. Our industry and our company move fast, and you can be sure that you will always have room to learn and grow. We’re proud of our team and the important work we do to build confidence for a more connected world. 
<h3>Who we are looking for:</h3>
<ul>
<li>An Attack &amp; Penetration Senior Consultant is a highly skilled penetration tester proficient in both technical and soft skills, capable of performing complex assessments while maintaining a business focus and meeting client requirements. This position will work both independently, part of a team, and as team lead to perform Security Assessments including vulnerability assessments, penetration tests, red team assessments, purple team assessments, wireless security assessments, physical security assessments, and social engineering. An Attack &amp; Penetration Senior Consultant also contributes to the development and continuous improvement of the Security Assessment practice through various industry contributions and leading team initiatives.</li></ul>
<h3>How you’ll make an impact:</h3>
<ul>
<li>Able to solo deliver or act as "point" for complex projects.</li><li>Acts as technical escalation point to assist other consultants.</li><li>Leverage cutting-edge techniques, tools, and procedures (TTPs), to covertly compromise clients.</li><li>Leverage cloud-based assets to execute targeted assessments.</li><li>Creatively use identified vulnerabilities across a client’s entire security posture (logical, physical, social) to demonstrate meaningful risks to clients based on industry and business focus.</li><li>Create comprehensive assessment reports that clearly identify root cause and remediation strategies.</li><li>Interface with client personnel to gather information, clarify scope and investigate security controls.</li><li>Execute projects using established methodology, tools, and documentation.</li><li>Collaborate with other team members and practices to complete client projects and practice contributions.</li><li>Provide support in the ongoing development of security assessment offerings through tool creation and process improvement.</li><li>Perform other duties as assigned.</li><li>Participate in industry conferences to include delivering presentations.</li> Qualifications for success:<li>Two (2) years of experience performing Vulnerability Assessments, Penetration Tests, Wireless Security Assessments and/or Social Engineering to enterprise-level organizations.</li><li>Two (2) years of experience in a consulting services role, or related information security positions.</li><li>Ability to travel 25-40% of the time to client sites.</li><li>Certifications such as OSCP, OSCE, CREST CRT, GIAC (GXPN, GWAPT, GPEN, GMOB) others are highly desired.</li><li>Bachelor’s Degree from a four-year college or university in Information Assurance, Computer Science, Management Information Systems, or related area of study; or related experience and/or training; or equivalent combination of education and experience strongly preferred.</li><li>Demonstrated ability to deliver projects using well-defined methodology across various security assessment disciplines including:</li><li>Ability to combine multiple separate findings to execute complex attacks.</li><li>Ability to manually validate vulnerabilities identified during assessments.</li><li>Ability to identify, describe and report vulnerabilities and standard remediation activities, to include clear demonstration of risk to clients through post-exploitation activities required.</li><li>Familiarity with many different network architectures, network services, system types, network devices, development platforms and software suites required (e.g., Linux, Windows, Cisco, Oracle, Active Directory, JBoss, .NET, etc.) required.</li><li>Familiarity with command and control (C2) frameworks, such as Cobalt Strike, Mythic, Covenant, etc. </li><li>Familiarity with evasive techniques for social engineering, C2, and post-exploitation.</li><li>Passion for creating tools and automation to make common tasks more efficient preferred.</li><li>Knowledge of programming and scripting for development of security tools preferred.</li><li>Motivation to contribute to the infosec community (speaking, publishing, tooling/research) preferred.</li><li>Demonstrated ability to create comprehensive assessment reports required.</li><li>Must be able to work well with customers and self-manage through difficult situations, focus on client satisfaction.</li><li> Ability to convey complex technical security concepts to technical and non-technical audiences including executives required.</li><li>Ability to lead and mentor others; willingness to collaborate and share knowledge with team members required.</li><li>Proven ability to review and revise reports written by peers required.</li><li>Demonstrated effective time management skills, ability to balance multiple projects simultaneously and the ability to take on large and complex projects with little or no supervision required.</li></ul>With Optiv you can expect:• A company committed to championing Diversity, Equality, and Inclusion through our Affinity groups including, Black Employee Network, Disabled Employee Network, Latino Employee Network, Optiv Pride (LGBTQIA+), Veterans Support Network, and Women's Network.• Work/life balance. We offer “Recharge” a flexible, time-off program that encourages eligible employees to take the time they need to recharge • Professional training resources, including tuition reimbursement• Creative problem-solving and the ability to tackle unique, complex projects• Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities. • The ability and technology necessary to productively work remote/from home (where applicable)If you are seeking a culture that supports growth, fosters success, and moves the industry forward, find your place at Optiv! As a market-leading provider of cyber security solutions, Optiv has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on trust, serving more than 12,000 clients of varying sizes and industries, including commercial, government, and education. We have the proven expertise to plan, build, and run successful security programs across Risk Management, Cyber Digital Transformation, Threat Management, Security Operations - Managed Services, and Identity and Data Management.Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, status as an individual with a disability, veteran status, or any other basis protected by federal, state, or local law.

Dallas

Senior Consultant – Attack &amp; Penetration – Threat

Apply to Cobalt Strike Cyber Security Jobs in companies remotely and near you. New Cobalt Strike Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Senior Red Team Engineer at Box	Automation BASH Blue Team C Cloud
Cybersecurity Architect (Pen Testing) at Fivesky	Burp Suite Cloud Cobalt Strike Compliance Exploit
Cybersecurity Architect (Pen Testing) at Fivesky	Burp Suite Cobalt Strike Exploit IAAS Linux
Senior Penetration Tester / Pen Test Leader (Netherlands) - Amsterdam at BreachLock	Automation AWS Azure Burpsuite Cissp
Senior Consultant – Attack & Penetration – Threat at Optiv	Active Directory Automation Cobalt Strike Crest GIAC

Cobalt Strike Cyber Security Jobs

0 Cobalt Strike Cyber Security Jobs. Page 1 of 1

5 closed cobalt strike cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cobalt Strike Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Cobalt Strike Cyber Security Jobs

0 Cobalt Strike Cyber Security Jobs. Page 1 of 1

5 closed cobalt strike cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cobalt Strike Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter