Red Team Security Engineer

Job Description

Millennium is hiring Red Team Security Engineer in Huntsville, AL. All candidates must have an active Secret Clearance with TS/SCI eligibility to qualify for consideration.

The Red Team Security Engineer will conduct multiple penetration tests of global customer networks, rapid development of domain or problem-specific tools that leverage identified vulnerabilities, research on the latest exploitation techniques and threat vectors, and design and configuration of representative test environments.

Candidate must support various training events, conferences, exercises, and demonstrations to ensure continued compliance with team member certification requirements to enhance technical capabilities, and to support authorized missions and test events.

Qualifications:

\n
• All candidates must have an active Secret Clearance with TS/SCI eligibility to qualify for consideration.
\n
• Bachelor’s degree from an accredited college or university in computer science, information systems, engineering, scientific or a mathematics-intensive discipline or a Relevant Technical Discipline. At least 3-5 years of practical experience required. Two years of relevant experience with an Associate’s degree will be considered the equivalent of a Bachelor’s degree. Four years of relevant experience will be considered equivalent to a Bachelor’s degree .
\n
• Must have a CEH & CISSP Certification upon hire
\n
• SPECIALIZED experience in Red Teaming, Computer Network Attack (CNA), Computer Network Exploitation (CNE), Computer Network Defense (CND), and/or penetration testing
\n
• Ability to independently and rapidly develop tools and scripts from concept to production in a high-stress, short deadline, under-resourced environment using multiple programming languages
\n

Additional Requirements:

\n
• Experience with at least one of the following scripting languages (PowerShell, Bash, Python, Ruby, Node.js)
\n
• Experience performing web application security assessments
\n
• Experience with TCP/IP protocols as it relates to network security
\n
• Experience with offensive tool sets including: Kali Linux, Metasploit, CobaltStrike, Intercepting Proxies, etc.
\n
• Experience in using network protocol analyzers and sniffers, as well as ability to decipher packet captures
\n
• Excellent independent (self-motivational, organizational, personal project management) skills
\n
• Proven ability to work effectively with management, staff, vendors, and external consultants
\n
• Ability to think outside the box and emulate adversarial approaches
\n
• Capable of conducting penetration tests on applications, systems and network utilizing proven/formal processes and industry standards.
\n
• Capable of managing multiple penetration test engagements, from cradle to grave, at the same time
\n
• In depth understanding of emerging threats, vulnerabilities, and exploits
\n