Consulting XFR Red Team Operator Professional ALEXANDRIA,

Are you passionate about breaking into well defended networks, while evading mature detection strategies? Are you interested in joining a team of like-minded experts, many of whom have decades of experience breaking into anything and everything to help organizations strengthen their security? If so, X-Force Red, IBM Security’s team of veteran hackers, is looking for a Red Team Operator, and you may be the perfect fit.

• Manage full adversary simulation engagements from conception to report delivery
• Communicate effectively with team members and clients during the engagement
• Keeping current with the latest offensive security techniques
• Perform adversary simulation of real-world adversary Tactics, Techniques, and Procedures (TTPs) by leveraging frameworks such as MITRE ATT&CK™ and other sources of information
• Develop payloads, scripts and tools that weaponize new concepts for exploitation, evasion, and lateral movement
• Engage in an active evasion of defenders to avoid detection and progress engagements
• Coordinate with other Red Team operators to achieve the specified goals
• Deliver reporting and debriefs to defenders in manner that improves detection and response capabilities
• Perform/present technical security research

Core responsibilities: (above)

Bachelor's Degree

• 3+ years of red teaming experience in a dedicated red team role
• 5+ years of system administration, network administration, or programming experience
• Ability to develop/modify exploits and payloads to avoid defensive countermeasures
• Understanding of real-world adversary operations methodologies, tactics, techniques, and procedures. In particular, the ability to apply frameworks (eg. MITRE ATT&CK™) in client engagements.
• Demonstrated history of published exploitation research
• Strong analytical and problem-solving skills
• Good interpersonal, organizational, communications, and time management skills
• Experience coordinating security testing projects with multiple consultants
• Effective English writing skills

• History of presenting at security conferences
• Track record in vulnerability research and CVE assignments
• Knowledge of Windows APIs
• Knowledge of EDR detection capabilities such as Carbon Black/Crowd Strike, etc. and associated evasion techniques for behavioral based alerting
• Demonstrated exploit, payload, or attack framework development experience
• Expert level skills in one of the following:
  Active Directory, Software Development, or Cloud Infrastructure
• Relevant certifications from organizations like Offensive Security (OSCP/OSCE), SANS (GPEN, GXPN, GWAPT), or CREST CSAT/CSAM or demonstrable equivalent skills
• Prior security consulting experience

IBM Consulting is IBM’s consulting and global professional services business, with market leading capabilities in business and technology transformation. With deep expertise in many industries, we offer strategy, experience, technology, and operations services to many of the most innovative and valuable companies in the world. Our people are focused on accelerating our clients’ businesses through the power of collaboration. We believe in the power of technology responsibly used to help people, partners and the planet.

In a world where technology never stands still, we understand that, dedication to our clients success, innovation that matters, and trust and personal responsibility in all our relationships, lives in what we do as IBMers as we strive to be the catalyst that makes the world work better.

Being an IBMer means you’ll be able to learn and develop yourself and your career, you’ll be encouraged to be courageous and experiment everyday, all whilst having continuous trust and support in an environment where everyone can thrive whatever their personal or professional background.

Our IBMers are growth minded, always staying curious, open to feedback and learning new information and skills to constantly transform themselves and our company. They are trusted to provide on-going feedback to help other IBMers grow, as well as collaborate with colleagues keeping in mind a team focused approach to include different perspectives to…