Cyber Security Expert

We are seeking an experienced Cyber Security Expert to join our team. In this role, you will be responsible for simulating cyber threats to assess the security posture of client networks.

About the Job:

The ideal candidate will have a strong background in offensive security, including internal and external penetration testing, Red Teaming, and social engineering. You will be expected to possess certifications such as OSEP, GXPN, CRTO, etc.

Key Responsibilities:

• Emulate threat actor tactics, techniques, and procedures to assess the security posture of client networks.
• Execute red teaming exercises, striving to achieve defined objectives, such as gaining domain admin privileges, accessing sensitive information, or simulating ransomware attacks.
• Stay updated on current threat actor groups, their tactics, and tools to replicate them effectively during client engagements.
• Demonstrate exceptional technical expertise and adaptability in assimilating new knowledge.
• Utilize your deep understanding of complex information systems and industry trends to identify vulnerabilities and communicate findings to the engagement team and client management through written reports and verbal presentations.
• Contribute to people-related initiatives, including coaching, recruiting, training, and staff retention.
• Foster a culture of continuous learning by maintaining an educational program to develop your personal skills and those of your team.
• Adhere to workplace policies and procedures, setting a positive example for your colleagues.

Requirements and Attributes:

• A bachelor or master's degree in Information Systems, Computer Science, Engineering, or related fields.
• 3+ years of recent experience in offensive security, including internal and external penetration testing, Red Teaming, and social engineering.
• Possession of certifications such as OSEP, GXPN, CRTO, etc.
• Proven ability to work independently or within large, complex projects delivering offensive cyber security services.
• Proficiency in developing, extending, or modifying exploits and offensive security tools, as well as operational experience in exploitation, lateral movement, and persistence on Windows and Linux systems.
• Experience bypassing preventative and detective endpoint and network security controls, using C2 frameworks like Cobalt Strike and Metasploit, and leveraging common offensive security tools (e.g., nmap, CrackMapExec, Impacket, Responder, etc.).
• Strong OSINT collection and organization skills, both manual and automated.
• In-depth knowledge of modern offensive security tools and frameworks, including Bloodhound, nmap, and Impacket.
• Familiarity with the Cyber Kill Chain and the MITRE ATT&CK Framework.
• Coding skills, in any of the following languages: C#, Python, C++, Go, PowerShell, ASP.NET.
• Excellent knowledge of local Red & Purple Teaming frameworks and guidelines such as iCAST, TIBER-EU, ABS' Red Team Guidelines, etc.
• Advanced understanding of Windows and Unix operating systems internals.
• Exceptional interpersonal, written, verbal, communication, and presentation skills.
• Proven experience in conducting penetration tests and red team assessments.
• Strong analytical skills and proficiency in data analytics methods.
• Demonstrated leadership abilities.

Languages:

• English language proficiency is required. Other languages may be an advantage.

What We Offer:

You will have the opportunity to work with a talented team of cybersecurity professionals. Our company provides opportunities for professional growth, including conference attendance, participation in hacking competitions, advanced trainings, and certification programs.

Our work environment is challenging, yet enjoyable. We value innovation, creativity, and teamwork. If you wish to learn and grow in your career, we will provide you with the necessary support and resources.

We also offer dedicated time for research and development of your own projects, aligned with company goals and values.