以上为北京时间。链接检查不代表仍在招聘,申请前请以招聘官网为准。
按这个岗位的城市和方向提醒,确认后才开启,可选择每日或每周。
岗位城市暂未明确,请先到找职位页面选择城市和方向。
选择求职条件执行红队渗透测试,模拟攻击者战术技术,评估客户网络安全,发现漏洞并撰写报告,推动安全改进。
At wizlynx group, we're on a mission to fortify the digital defense of our clients by staying one step ahead of cyber threats. As a Red Team Specialist, you'll play a pivotal role in our cybersecurity team, focusing on emulating threat actors to assess and enhance the security of enterprise networks. Your mission: to penetrate, identify vulnerabilities, and simulate cyberattacks to strengthen our clients' defenses.
Key Responsibilities
Client engagements:
Emulate threat actor tactics, techniques, and procedures to assess the security posture of client networks.
Execute red teaming exercises, striving to achieve defined objectives, such as gaining domain admin privileges, accessing sensitive information, or simulating ransomware attacks.
Stay updated on current threat actor groups, their tactics, and tools to replicate them effectively during client engagements.
Demonstrate exceptional technical expertise and adaptability in assimilating new knowledge.
Utilize your deep understanding of complex information systems and industry trends to identify vulnerabilities and communicate findings to the engagement team and client management through written reports and verbal presentations.
People development:
Contribute to people-related initiatives, including coaching, recruiting, training, and staff retention.
Foster a culture of continuous learning by maintaining an educational program to develop your personal skills and those of your team.
Adhere to workplace policies and procedures, setting a positive example for your colleagues
Qualifications and attributes
Desired qualification include:
A bachelor or master's degree in Information Systems, Computer Science, Engineering, or related fields
3+ years of recent experience in offensive security, including internal and external penetration testing, Red Teaming, and social engineering
Possession of certifications such as OSEP, GXPN, CRTO, etc.
Proven ability to work independently or within large, complex projects delivering offensive cyber security services.
Proficiency in developing, extending, or modifying exploits and offensive security tools, as well as operational experience in exploitation, lateral movement, and persistence on Windows and Linux systems.
Experience bypassing preventative and detective endpoint and network security controls, using C2 frameworks like Cobalt Strike and Metasploit, and leveraging common offensive security tools (e.g., nmap, CrackMapExec, Impacket, Responder, etc.).
Strong OSINT collection and organization skills, both manual and automated.
In-depth knowledge of modern offensive security tools and frameworks, including Bloodhound, nmap, and Impacket.
Familiarity with the Cyber Kill Chain and the MITRE ATT&CK Framework.
Coding skills, in any of the following languages: C#, Python, C++, Go, PowerShell, ASP.NET.
Excellent knowledge of local Red & Purple Teaming frameworks and guidelines such as iCAST, TIBER-EU, ABS’ Red Team Guidelines, etc.
Advanced understanding of Windows and Unix operating systems internals
Exceptional interpersonal, written, verbal, communication, and presentaion skills
软件和信息技术服务业
负责在香港销售网络安全产品与服务,开拓新客户并达成销售目标。需独立完成业务开发、客户关系维护及销售管道管理,同时参与市场推广与IT社区互动。