Senior Security Consultant, Emergent Threat & Exploit Researcher

Role Overview

• Deliver Rapid7’s Vector Command Continuous Red Teaming service
• Investigate emerging threats and uncover novel vulnerabilities
• Analyze N-day and zero-day vulnerabilities
• Identify novel attacks through black-box evaluation of web applications
• Develop and maintain positive relationships with clients
• Mentor and coach junior staff to promote growth

Requirements

• 5+ years in an active technical security role & 4+ years Penetration Testing Consulting experience
• Expert knowledge of modern penetration testing tools and methods
• Strong knowledge of network and web-based application security concepts
• Proficiency in Windows/Linux/UNIX internals
• Experience using Ruby, Python, PHP, Java, C, or C++
• High quality report writing and peer reviewing
• Bug Bounty experience
• Certifications such as OSCP, OSCE, GXPN, OSEE, or CREST
• Excellent communication skills with stakeholders
• Demonstrate a commitment to the end-to-end testing process

Tech Stack

• Java
• Linux
• PHP
• Python
• Ruby
• Unix

Benefits

• Professional development opportunities
• Collaborate with a team of Red Team operators
• Create additional value for clients through continual insights and consultative advice