مهندس أول للفريق الأحمر

Generate meaningful information from deep web or national entities or international entities about existing or emerging threats to mitigate risks and Identifying attack path that breaches organization’s security.

Responsibilities

Activity:

• Compromising the target's security by extracting information, infiltrating its systems or breaching its physical perimeters.
• Avoiding detection by the blue team. Many attacks occur over a fleeting period of time, making it extremely tricky for the blue team to neutralize the threat before the 'damage' is done.
• Exploiting bugs and weaknesses in the target's infrastructure. This highlights gaps in the organization's technical security that require fixing, thus improving its security posture.
• Initiating hostile activity - including sophisticated penetration testing - giving a reliable assessment of the blue team's defensive capabilities.

Methodology:

• Initial reconnaissance - open source intelligence (OSINT) for collecting information on the target.
• Deploying command-and-control servers (C&C or C2) to establish communication with the target's network.
• Using decoys to throw the blue team off the scent.
• Applying social engineering and phishing techniques to manipulate employees into exposing or revealing information to compromise their machines.
• Physical and digital penetration testing - typically done in a vacuum.

Qualifications

• Certified Ethical Hacker (CEH) or similar certifications preferred.
• Hands-on Web Application and API Penetration Testing.
• Practical Mobile Application Security Testing.
• Independent Reconnaissance, Attack-Surface Discovery, and Exploitation.
• Scripting, Automation and Technical Problem-Solving.
• End-to-End Assessment Ownership and Technical Reporting.
• Experience in Reverse Engineering (either or both hardware or software).
• Experience in Web Application PT including understanding of oAuth 2.0 like auth protocols.
• Experience in Mobile application PT.
• Experience in Mobile OS PT.
• Experience in Network PT (including Wireless PT).
• Experience in Thick Client PT.
• Experience in exploit writing especially in PowerShell, python.
• Experience in RFID and IoT based attacks and social engineering styled attacks.
• Experience with Windows AD red teaming with in-depth knowledge.
• Experience in any C2 server tool with in-depth knowledge.
• Experience with Malware Development and EDR Bypass.
• Experience with Bug Bounty programs, either as a triager or researcher, with strong skills in validating and assessing reported vulnerabilities.
• Experience on designing, deploying and operationalize AI Red Team projects, including setting up secure test environments and model sandboxes, building adversarial/prompt-injection tooling, running adversarial evaluations, and integrating results into engineering and CI/CD workflows.