Specialist - Offensive Security at Cyber Advisors

Cyber Advisors (CA) is a rapidly growing Cybersecurity Consulting firm and MSP. We are seeking a Specialist for our Offensive Security team, to support our accelerating company growth and the equally important growth of one’s own career. CA believes in inclusion and is dedicated to continued employee development. We offer a competitive salary and benefits and want candidates who focus on innovation and results. Successful CA employees are detail oriented and have excellent communication skills. The successful candidate will be a creative problem-solver with the ability to structure and order assignments efficiently. Candidates should apply to become part of a forward-thinking team that values your contributions and well-being

The successful candidate will have a proven track record of leading and executing penetration tests, performing threat/adversary emulation within a passionate offensive security team and executing tactical, offensive assessments.

This role will report to an offensive security team manager, with headquarters located in Minneapolis, MN. This position is 100% remote but candidates must resided in the continental United States.

Principal Duties

Include Cyber Advisors seeks a Specialist for our Offensive Security team, to deliver the firm’s service offerings around system-wide views of threat-driven risks and applying them to the testing of systems and services that the firm delivers.
The successful candidate may be early in their career journey of leading and executing penetration tests, performing threat/adversary emulation within a passionate offensive security team, and executing tactical, offensive assessments.

Primary Responsibilities

• Perform scoped and open-ended assessments on internal and external facing systems
• Perform threat and vulnerability research to identify new ways of achieving the program’s
  mission and act as a source for innovation within the cybersecurity industry
• Develop and implement processes and/or tools that assist with execution of security
  assessments, including custom tools and automation
• Work with the customer to identify gaps and address findings

Required Experience

• At least 1 year of progressively responsible experience performing network and application security assessments and/or Red Team operations.
• Prior experience should include one or more of the following:
  • Executing application and/or network penetration tests
  • Executing Red Team or Threat Emulation assessments
• Work collaboratively with a variety of internal and external stakeholders (security consultants, project managers, service managers, development teams, technical SME’s, vendors) to deliver high quality assessments.
• Strong understanding of one or more of the following:
  • Networking fundamentals (all OSI layers, protocols, etc.)
  • Windows/Linux/Unix operating systems
  • Operating system and software vulnerabilities and exploitation techniques
  • Web and mobile application vulnerabilities and exploitation techniques
  • Malware packing, obfuscation, persistence, exfiltration techniques
  • Security technologies such as Firewalls, IDS/IPS, Web Proxies and DLP amongst others
  • Commercial or open-source offensive security tools for reconnaissance, scanning, exploitation and post-exploitation (e.g. Nmap, Nessus, Metasploit, Burp Suite, etc.)
  • Project management
• Developing in-house tools or scripts to improve delivery and facilitate testing operations.
• Demonstrated leader with team-oriented interpersonal skills, with the ability to interface effectively with executive leadership, IT management, and technology vendors.
• Ability to collaborate and build positive relationships across multiple stakeholders.
• Agile thinking and analysis that leads to win-win and innovative solutions.
• Strong written and verbal communication skills.
• Calmness and clarity of thought under pressure and ability to maintain confidentiality.
• Ability to prepare and present project ideas and proposals to senior management.
• Understanding of financial sector, or other large organization, security and IT infrastructures.
• Willingness to work non-standard hours, if necessary.
• Excellent oral and written communication skills.

Preferred Experience

• Experience in the penetration testing/cyber security industry
• Bachelor's degree in business or related field preferred but not required.

Travel

Limited, but depends on project requirements

Compensation / Benefits:

- Competitive salary depending on skills and experience.

- PTO and 8 paid holidays.

- Employer-paid Health and Dental Insurance for CA employees.

- Great opportunities for career advancement

- 401k with employer matching day one

- Disability and Life Insurance

- Bonuses eligible