Specialist Red Team Operator (Specialist Hive Member) UK

Job Summary: 

CovertSwarm exists to outpace cyber threats by constantly compromising our clients. As we continue to grow and expand, our EU team is recruiting.  

We are looking for a highly motivated red team members who are driven to find new or different ways to breach organisations, can adapt attacks to bypass controls, and are relentless at finding novel methods to compromise a target. 

We are seeking individuals to join at the level of ‘Specialist’ – we look for individuals with strong experience of delivering security testing in multiple security domains, with one or more specialist subjects. 

This is a chance to join the UK’s fastest growing cyber security business with the ability to drive real change through innovation and fresh ideas. 

About CovertSwarm 

Our goal is simple: We aim to compromise our clients, constantly. Our Hives – a specialist team – ‘swarm’ around our targets, always looking for a new way to compromise them. As a result, we provide security insights and advice based upon our client’s technological controls and mitigating solutions and propose improvements that can be made from a training, process, and physical control perspective. 

Role and responsibilities 

Unlike the typical production line approach of some cybersecurity businesses, you will not be juggling an overwhelming array of Penetration Test or Red Team projects. Instead, you will be tending to a select number of high-profile clients and challenging their perimeter security, people, processes, and more. 

The position is remote based as we strive to compromise our clients in as realistic scenarios as possible. On rare occasions there may be a need to visit clients in person, such as to deliver physical security or social engineering attack vectors. 

The general responsibilities of the role include: 

• Act as a business contact for CovertSwarm clients, fostering and maintaining relationships with key stakeholders and business partners. Ensuring client communication throughout the engagement and contract. 

• Perform cyber security assessment activities against complex networks, applications, operating systems, wired/ wireless networks, and mobile applications/devices. 

• Develop and maintain attack plans bespoke to each client to replicate an Advance Persistent Threat (APT). 

• Create high quality actionable, threat-based, reports on security assessment results, which the client is debriefed on fully following the completion of any assessments. 

• Consult with application developers, systems administrators, and management to demonstrate security assessment results, explain the threat presented by the results, and consult on remediation. 

• Communicate security issues to a wide variety of internal and external “customers” to include technical teams, executives, risk groups, vendors, and regulators. 

Who we are looking for 

Whether you have a broad knowledge of all-things cybersecurity, or if you are specialised in certain areas, then we want to hear from you. Some of the key areas to note are: 

• Network security, including Linux and Windows infrastructure 

• Application security, mobile applications, APIs, thick clients, etc. 

• Social engineering with phishing, vishing, and in-person engagement experience 

• Coding, scripting, reverse-engineering & debugging 

• SCADA, IoT, embedded devices, etc. 

• Experience of working with clients directly. 

We typically expect Specialists to have one or more security testing specific qualification such as OSCP, CRTO, OSWE, CSTM or other CREST accreditations such as CRT. 

We are always looking to speak to great people. If you seem like a great fit, we will invite you to a call, even if there aren't any openings as we are growing and will be looking to bring people in over the coming months. So, if you're interested in joining, please reach out! We look forward to getting to know you! 

Benefits 

Aside from working with some of the most talented and passionate people in the industry we can also offer you:  

• A fully remote (working from home – ‘anywhere in the world’) role with only the need to travel to client sites when in-person meetings are required, or we are running our quarterly meetups. 

• You will not have to use a word processor for report writing – we deliver the results of our endeavours through our bespoke online portal. 

• A culture born of vulnerability research. Reporting missing HTTP headers and SSL/TLS weaknesses, and outdated software patch versions is just ‘noise’ in our view. We focus on the actual point of compromise and continually look for new ways to breach our clients. 

• Work when you want – That does not have to be a 9-5, but we ask that the job is done well, and core meetings are attended online. 

• We go to DEF CON, every year (well, when it is not cancelled!) 

• Software, hardware, and research materials are not bound by strict limits. If you need a resource to deliver to the best of your ability, we will aim to accommodate this. 

• Unlimited Training – If it is relevant and will help you, your Hive team, and CovertSwarm to better breach and educate our clients, then you can do whatever training you need to fulfil this. 

• Unlimited Holiday – We all need downtime, take it, whenever you need it. There are no prizes for burnout. You work to live, not live to work. 

• Private Medical Insurance/Healthcare. 

• Company Pension/401k. 

• Access to our Electric Vehicle salary sacrifice scheme (currently UK only). 

• If you present at a major infosec event/hacker conference, then we will pay your expenses and give you a bonus to reflect this. We want to give back to this great community that continues to help us all. 

• No corporate politics – The continued growth of CovertSwarm as a business, the team, and the quality of our services depends upon us being radically candid with one another. Always. 

We pay good salaries, have a brilliant culture, and some of our Board are hackers, too! However, if you are just chasing the biggest pay packet, or are driven by your ego, then we are not for you, and you are not for us. 

Join the Swarm 

If you love cyber security but are currently held-back, bored, or not inspired to do great work every day in the best and fastest growing industry in the world, then we want to hear from you.  

If you truly want to be part of something new, exciting, and different and to get away from the monotony of traditional development roles then apply here

*We pride ourselves in growing our talented team of Hackers via our networks, so no agencies please! 

CompensationStarting from £40,000+ depending on skills and experience