Red Team Specialist

• Performs internal red team program assessments including penetration testing, “purple team” exercises, and tabletop exercises; summarizing the exercise for senior leadership, including areas of success and areas of opportunity.

• Creates test cases, performs manual and automated tests, reports problems encountered, and documents test results for follow-up. Validates remediations.

• Configures automated vulnerability scans and provides vulnerability data to the appropriate asset owners.

• Works with 3rd party testing firms and internal teams on testing schedules and logistics. 

• Works closely with the IT operations and development teams with the common goal of secure application and network infrastructure design.

• Participates in the creation and/or maintenance of new security solutions as well as policies, standards, baselines, guidelines, and procedures.

• Maintains knowledge of Insperity’s enterprise security goals, policies, procedures and guidelines, and endeavors to uphold those goals.

• Assists in the accomplishment of Insperity Company goals.

• Helps other employees to accomplish Insperity Company goals.

• Performs other duties as may be assigned by department supervisors.

• Participates in the remediation of technology incidents as required.

Qualifications

• Bachelor’s Degree in the field of Computer Science, a related discipline, or four years of related work experience is required.

• Three to five years of professional penetration testing/vulnerability management experience is required.

• Penetration testing related certifications are preferred. OSCP, OSCE, GPEN, GWAPT, GXPEN, etc.

• Experience with common penetration tools such as Burp Pro, Kali, Metasploit, and Nexpose.

• Proficiency with web application languages such as HTML, ASP, PHP, JavaScript.

• Proficiency with scripting languages such as Python, PowerShell, and bash.

• Strong working knowledge of Windows and Unix network architecture.

• Solid understanding of various security exploits, TCP/IP and security related technologies and protocols.

• Must stay up to date on new testing methods and technologies.

• Familiarity various compliance regulations such as HIPAA, PCI, SOX, and PCI.

• Proven analytical and problem-solving ability.

• Must have strong written and verbal communication skills and the ability to maintain effective work relations with those encountered in the course of employment.