OVERVIEW

Job Title: Senior Advanced Assessments Operator

Position Type: Full-Time

Benefits: Neuvik has a comprehensive benefits package including but not limited to Medical, Dental, Vision, 401 (k), Life Insurance, and Paid Time Off plus Federal Holidays.

Location: Remote (Up to 25% travel, as needed)

How to Apply: Reach out to us at contact@neuvik.com with a copy of your resume and a brief description of your interest in the role. Please include subject line "Application for Senior Advanced Assessments Operator."

Applications submitted through the Neuvik website contact form and/or without a resume attached will not be considered.

Neuvik is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.

JOB DESCRIPTION

A successful Senior Operator for the Neuvik Advanced Assessments Team should have a vast background in information security, system administration, network architecture or application. Applicant should be a critical thinker who is well rounded and possess a diverse set of skills, including exploitation at scale while identifying misconfigurations in network infrastructure, parsing various types of output data, presenting data in a digestible manner, thinking well outside the box, or are astute enough to learn these skills quickly. If this is you, then you’re the type of Advanced Assessments Team member we’re looking for. 

ROLE

The Senior Operator role is a Senior employment position on the Advanced Assessments Team at Neuvik. A Senior Operator is expected to demonstrate the ability to think beyond the parameters of penetration testing, cloud security, red teaming, and perform the following:

• Act as the technical lead for client engagements
• Ability to independently run an engagement and deliver a report to the customer if needed
• Perform cloud security assessments, network penetration tests, and web application assessments
• Deploy offensive security tooling in a controlled and safeguarded manner
• Create custom payloads for engagements
• Has the capability to create scripts through one of the well-known scripting languages (I.E., python, PowerShell, ruby, bash, Perl)
• Have a solid understanding of AWS, Azure, or GCP · Write reports from engagements with a focus on business impact
• Provide recommendations for identified findings

The Senior Operator role also contributes to internal projects such as build automation and offensive operations tooling.

RESPONSIBILITIES

A Senior Operator, as part of the Advanced Assessments Team, has the overall responsibility to:

• Effectively communicate and discuss findings and strategy with internal stakeholders including leadership and technical team members 
• Talking to senior executives at large organizations with the ability to learn how to communicate and effectively move the Cyber Security program of major organizations
• Recognize and safely use attacker tools, tactics, and procedures 
• Must be able to work independently with a team that is largely remote
• Must also be able to effectively communicate using Remote Office tools such as Microsoft Teams, Slack, Discord, etc.
• Ability to quickly get up to speed on Emerging Technologies that may be very new
• Perform network penetration, cloud, web, mobile application assessments, source code reviews, threat analysis, wireless network assessments, or social-engineering assessments 
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences 
• Contribute to internal projects around building tooling or automating processes 

KNOWLEDGE TO GAIN

A Senior Operator will continue to learn and research emerging technologies for the purpose of developing new potential attacks, writing blog posts, and presenting talks.

QUALIFICATIONS

Overall, a Senior Operator for the Advances Assessments Team must have a background in information security, system administration, network architecture or application. Critical thinking, and the ability to demonstrate critical thinking, is required. Specific qualifications required also include, but are not limited to, at least 10 of years’ experience (e.g., internships, classes, projects, hands-on work, self-directed study) in all, or at least most of the following areas:

• 10+ years' experience in many of the following areas is desired, we understand that some of these items may have less than 10 years of existence. We are looking for a total amount experience not individual experience in each item.
• Network penetration testing and manipulation of network infrastructure 
• Experience in VMWare Environments
• AWS, GCP, or Azure penetration testing and security assessments
• Mobile and/or web application assessments 
• Email, phone, or physical social-engineering assessments 
• Shell scripting or automation of simple tasks using Perl, Python, or Ruby 
• Develop, extend, or modify exploits, shellcode or exploit tools 
• Understanding of applications in C#, ASP, .NET, Objective-C, Go, or Java (J2EE) 
• Reverse engineer malware, data obfuscators, or ciphers 
• Understand network protocols, data on the wire, and covert channels 
• Understand Unix/Linux/Mac/Windows operating systems, including bash and PowerShell 
• Desire to learn and understand emerging technologies
• Must be eligible to work in the US without sponsorship 
• Ability to document and explain technical details in a concise, understandable manner 

PREFERRED SKILLS

A strong Senior Operator for the Advanced Assessments Team has demonstrated skills in following preferred area:

• Experience with Burp Suite, C2 Frameworks, developing payloads and droppers
• Experience in security competitions, CTFs and/or testing platforms such as Hack the Box, TryHackMe, Overthewire, etc 
• Related projects around cybersecurity and programming.
• Windows and Advanced Windows Exploitation is desirable.
• Strong technical acumen and ability to quickly assimilate new information 
• Ability to successfully interface with clients (internal and external) and manage expectations of others 
• Network Architecture Experience (Route, Switch, Datacenter Switching, SDN)

ADDITIONAL CONSIDERATIONS

The Senior Operator for the Advanced Assessments Team role is based in the United States of America (U.S.). Additional considerations include, but are not limited to:

• Ability to work on a computer for prolonged periods of time
• Eligibility to work in the United States without sponsorship
• A reliable high-speed internet connection (i.e., at least 150mbps)
• Willingness to travel within the U.S. up to 25%
• Ability to document and communicate technical details in a concise, understandable manner