Red Teamer / Pentester

Let me be honest with you, the reader. If I need to describe to you what a penetration tester and/or red teamer does, you probably are not going to fit in and are probably not the person I’m looking for. Of course, I’m 100% aware that the exact responsibilities and expectations can be very different depending on the company you would be working for, and of course I’m willing to explain those to you. Before I describe those expectations and many other details, I’d like to start by explaining a bit more about our company and our mission. Matching with our company culture and values is just as important as being able to match our day-to-day job expectations.

Working for Securify

Working for Securify is working to make sure everyone can safely use and enjoy the full potential of technology. We are a team of creative thinkers with a well-honed hacker-mindset. We are people that care about the security of services and software that we trust in our day-to-day lives, and will (attempt to) avoid those services that we don’t know are secure. We make the choices that are more secure than convenient and will educate you about why you should do the same.

Securify is fully dedicated to providing preventative security services and we aim to be the go-to supplier for our clients if they want high quality assessments performed. For more than 10 years, we’ve been doing this, and we don’t plan to stop increasing our knowledge and quality. We do this work for up-and-coming companies but also for fortune-500 companies.

Responsibilities and expectations

I, (the pentesting business unit manager writing this), have high expectations of you and your capabilities. You are potentially joining a highly skilled, senior heavy team, and I need you to be able to keep our quality standards high. Of course we’ll do our best to teach you along the way, you are not expected to be a perfect employee straight out of the gate. Bullet point wise I expect you to be able to do the following (eventually):

• Perform penetration testing amongst various services. (Web, Mobile, Networking, Cloud)

• Be able to write great quality reports about pentesting.

• Review reports and give constructive feedback to fellow team members.

• Assist our sales team with performing intakes for clients.

• Help develop and maintain (new) tools/techniques/documentation.

• Present and explain penetration testing results and reports to clients.

• Provide feedback and think critically about current operations and procedures.

• Utilize your free will and individuality but work together with a team.

• Keep improving yourself and the services we offer to our clients.

To highlight our understanding, that there is no fixed formal education program to become a top tier penetration tester, we’ve split our requirements in several categories. We urge everyone that believes they meet the must have requirements to check-in with us for a possible match. The requirements written below are the basis we are looking for in candidates. More specialized positions (red teamer) or higher positions (medior/senior) naturally come with more expectations and requirements.

Must have

• Capability to be a team player and work well in a team.

• Capability and willingness to learn quickly.

• Professional communication capabilities, written and oral, in English.

Should have

• A keen interest in penetration testing and cybersecurity.

• A showcase of all the cool hacker stuff you have already been doing, be it CTF or other challenges, and maybe cool home projects.

• A drive to keep learning and be the best security expert you can be.

• Any certificates that prove offensive security skills, such as OSCP or equivalents from other vendors.

Could have

• Any of the more advanced certificates in the offensive security world.

• Experience in developing malware and other security tools.

Our offer

High expectations should come with a good offer. Our offer includes:

• A company that wants to invest in its employees. We are in it for the long haul if you are.

• A company that welcomes employee initiative and taking ownership.

• A company that is informal and not tied down in bureaucracy.

• A company that is committed to developing cool stuff and researching new things.

• The flexibility to work in a hybrid environment that first your needs.

• Necessities such as pension, a MacBook, office lunch, hacker hoodies, etc…