Red Team Penetration Tester

- A minimum of five (5) years of experience in software engineering relevant to program development and modeling/simulation for DoD or IT systems. - Proficient in both Linux and Windows operating systems. - Extensive knowledge of common Penetration Testing (PENTEST) tools such as Kali, Metasploit, NMAP, and Cobalt Strike. - Experience in Penetration Testing and Red Team Operations. - Skilled in Tool/Software Development including exploits, malware, C2, reverse engineering, and bug bounties. - Programming expertise in Python, C, C#, C++, Go, Perl, and PowerShell. - Competence in Web Development, Web Application Development, and Web Penetration Testing. - Familiarity with NSX, vCenter, vRealize Suite, Horizon View (VDI), and additional technologies. - Knowledgeable in PAN-OS, FirePower, Nexus, IOS, and ASA. - Experience with ONTAP and SnapMirror. - Proficient with Active Directory, Entra ID (Azure AD), SSO, MFA, and identity federation. - Experience in automation utilizing PowerShell, PowerAutomate, Logic Apps, and Graph API. - Knowledge of Microsoft Entra ID and Microsoft 365 in hybrid environments. - Familiar with Palo Alto, Cisco, VMware, NetApp, and Microsoft products. - Experience in extending or integrating on-premises Active Directory with Entra ID. - Proven ability in managing identity and access within Microsoft Entra ID. - Background in conducting Red Team operations in an MDE environment. - Familiarity with AWS, Cloud Audit, and Microservice Architecture. - Experience working with AWS services such as EC2, S3, KMS, and RDS, coupled with security best practices. - Knowledge of Web Services penetration testing (RESTful and SOAP) and Web Authentication protocols like OAuth2 and SAML. - Proficient in PHP, ASP, SQL databases, Java, HTML, and NoSQL. - Possession of at least one certification from the following: Security+, CCNA Security, CySA+, GICSP, SSCP. - Certified as a penetration tester with one or more of the following: OSCP, OSCE, OSEE, OSWP, or relevant SANS certifications (like GPEN or GWAPT). - Completion of the OSD Sponsored Cyber Operation Academy Course (COAC). - Participation in Capture the Flag events (DEFCON, Over-The-Wire, Hack the Box). - Experience in security research that led to a Common Vulnerabilities and Exposures (CVE).