Overview

Core Tech Services Security Red Team

The team performs ethical hacking to help identify potential threats and risks to businesses before they evolve into fully fledged threats. The information is then used by the organization to improve the system security, in an effort to minimize any potential attacks.

Job Responsibilities

• Perform penetration testing against critical Trend Micro cloud applications and corporate infrastructure
• Document and report findings to engineering and management teams
• Design and test new security technologies, automations, and controls
• Recognize and safely utilize attacker tools, tactics, and procedures
• Develop scripts, tools or methodologies to enhance red teaming processes

Qualification/Requirement

• Understanding of computer hardware, software, networks, communications and connectivity
• Familiarity in both Linux/Unix and Windows operating systems
• Proficiency in wireless, mobile device security, cloud technologies (IaaS, SaaS environments, etc.), and web technologies
• Experience using scan/attack/assess tools and techniques, including proficiency in at least the Metasploit framework
• Experience conducting full-scope assessments and penetration tests including: social engineering, server and client-side attacks, protocol subversion, web application exploitation
• Experience configuring, running, validating and contextualizing the findings of vulnerability discovery tools such as Nessus, SAINT, NeXpose, Retina, Nipper…etc.
• Understanding of SQL, XSS, CSRF, XXE, and other trends in web exploitation
• Demonstrated experience in technical report writing
• Minimum of 5 years of experience in penetration testing
• Experience with mobile and cloud environments
• Excellent oral/written communication and analytical skills
• Ability to work independently and as part of a team to achieve objectives
• Average or above English writing and speaking ability is expected