Senior Security Consultant, Red Team

Spain·Full-time·Added over a year ago

IOActive

5 open roles

Apply

What they offer

Full-time hours
Per the ad.
Fully remote
Per the ad.

What they ask for

Have the right to work in Spain
IOActive doesn't mention sponsorship in the ad.
Work in English
English is required, per the ad.

This job was published a year ago

The role

"Making the world a safer and more secure place."

It’s our mission, plain and simple. It drives everything we do – from research to client work to community involvement. And it unifies our global team into an elite force with integrity, fierce passion, and relentless creativity that doesn’t just “push the envelope” or “think outside the box.” We shred the envelope, crush the box, and we have fun doing it. We are always looking for people who share our mission to join us.

What you'll do

Work as part of a team performing Red and Purple Team Campaigns for IOActive clients, both remotely and on-site
Perform adversarial emulation, assumed breach scenarios, post-exploitation, social engineering, and physical security testing
Manage project tasks and deadlines on a multi-time-zone team
Develop unique tools to assist in project goals
Exploit vulnerabilities found in client’s people, processes, and technology; then clearly communicate complex vulnerabilities to both technical and non-technical client staff
Create comprehensive technical reports explaining technical and business risk of the vulnerabilities found. This includes actionable recommendations/considerations for the client
Participate in project conference calls with clients and on business development calls in support of sales activities
Create and lead technical customer presentations
Provide technical leadership/mentorship to the consulting team and to our clients on security topics
Contribute to the security industry through presentations, whitepapers and/or research

Role

IOActive Red Team Specialists perform multi-vector, chained attacks that include exploitation through physical, network, web, and social engineering methods with the goal of making our clients more secure and prepared to respond to real incidents. Activities involve planning and reconnaissance to identify critical assets and potential attack paths, exploitation of vulnerabilities resulting in infiltration of the environment, acting on the objectives of the campaign through post-exploitation, and documentation of actions and outcomes.

Requirements

What we're looking for

Experience performing and leading covert red team operations and activities, including performing adversarial emulation, assumed breach scenarios, post-exploitation, social engineering, and physical security testing
Penetration testing experience in Network, Web applications, Wireless networks, Physical security, and Social engineering
Experience with C2 and post-exploitation frameworks, including Cobalt Strike, Empire, Metasploit, Throwback, and similar tools
Understanding and proficiency with some of the following: Python, Ruby, PowerShell, Java, and Shell scripting
Knowledge and experience with enterprise network/system/application architecture and design including complex environments utilizing Microsoft Windows, Active Directory, and Linux
Deep understanding on Windows and Linux systems administration and post-exploitation activities on each platform
Ability to present complex material in a digestible, consumable manner to all levels of management
Highly experienced with OS, services, and application hardening
Strong ability to find vulnerabilities and develop proof of concepts
Ability and desire to travel at least 50% of the time – both nationally and globally

Pay & benefits

What you'll get

🎯 A chance to work with an industry leader in cyber security

💡 Access to world-class technical teams and research

🏆 A high-energy, collaborative team that values innovation

💻 Flexibility—work remotely or from the office as needed

✈️ Opportunities for travel

💰 Competitive compensation and performance-based incentives

Compensation Range: 75,000 to 150,00 USD, based on location and experience level.

If this sounds like your kind of challenge, we’d love to hear from you. Let’s talk!

Why IOActive:

We have over 25 years of experience that’s established and stable; yet high-growth with the energy, passion and dynamic work environment of a startup. We are renowned for our innovation and thought leadership within our high-profile, cutting edge space. We're one of “the good guys” doing crazy cool stuff to thwart bad guys in a critically important business, social and political arena. Our work is great fun with great importance. Above all else, we value our people and our customers. Relationships matter.

IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.

This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time.

About IOActive

IOActive is a cybersecurity company that provides security consulting services, including application security, red teaming, and operational technology security. The company's careers page lists roles such as Security Consultant and Senior Security Consultant, indicating a focus on hands-on security assessment and research. IOActive operates globally, with job openings in the United States, Brazil, Canada, the United Kingdom, and Spain.

Industry: Cybersecurity
Headquarters: Seattle, USA
In Spain: Madrid

Good to know if you are moving

IOActive has a job opening for an Associate Security Consultant in Madrid, Spain, indicating a local presence.
The company offers remote positions in the United States and Brazil, suggesting flexible work arrangements.
IOActive's roles include security consulting and research, which may appeal to professionals with a background in cybersecurity.
The company operates internationally, with openings across the Americas and Europe, providing potential for global mobility.

In their own words

About the company & team

IOActive, a trusted partner for Global 1000 enterprises, provides research-fueled security services across all industries. Our cutting-edge cybersecurity teams provide highly specialized technical and programmatic services including full-stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state of the art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK.

All open roles at IOActive