Consultant - RED Team - PH

Date: 29 Nov 2024

Service Line / Portfolios: Cyber

Location:Manila, PH

• Simulate real-world attacks using various tactics, techniques, and procedures.
• Conduct penetration testing, vulnerability assessments, and social engineering exercises.
• Identify and exploit vulnerabilities within the organization’s infrastructure.
• Perform threat modeling exercises to understand potential threats.
• Document findings and provide comprehensive reports with recommendations.
• Collaborate with security teams to improve incident response capabilities.
• Stay updated with the latest attack vectors and threat landscapes.

• Demonstrate a strong commitment to personal learning and development.
• Understand how our daily work contributes to the priorities of the team and business.
• Understand the set expectations and demonstrate accountability in keeping personal performance on track.
• Actively focus on developing effective communications and relationship-building skills with stakeholders, clients and team.
• Demonstrate an appreciation for working with others.
• Demonstrate integrity and an awareness of strengths, differences, and personal impact.

• Proven experience as a Red Team manager or similar role in cybersecurity.
• Deep understanding of attacker tactics, techniques, and procedures (TTPs).
• Ability to think like an adversary and uncover hidden vulnerabilities.
• Relevant certifications (e.g., OSCP, CRTO) are a plus.
• Excellent problem-solving and analytical skills.
• Experience with various public cloud components and architectures.
• Experience in evading security detection controls.
• A passion for offensive security, Red Teaming and a drive to stay up-to-date with current attack techniques and new vulnerabilities.
• Knowledge of security testing frameworks and standards such as OSSTMM, OWASP, NIST SP 800-115, Lockheed Martin’s Kill Chain, and MITRE ATT&CK.
• Experience with technologies like WMI, Win RM, (Azure) AD and ability to script/program using e.g. Power Shell, C#, C, Python, Go, Bash for offensive purposes.
• Experience setting up and using C2, working with tools like Cobalt Strike, Impacket, Mimikatz, Kekeo, Rubeus, socat and Sysinternals suite.

Requisition ID: 106370