Red Team Engineer, HAP Tech

Information Technology United States


Description

Position at Berkeley Research Group, LLC

HAP Tech, a subgroup of BRG’s Healthcare Analytics practice (HAP), is one of the firm’s largest and fastest growing teams. This innovative group is currently looking for talented and dynamic professionals to join us as we continue to grow! HAP Tech supports and advises pharmaceutical manufacturers on how to navigate the challenges and complexities of the 340B program as well as other areas of the healthcare ecosystem. Our team is the established market leader in data and technology solutions for 340B-related issues and we support an impressive client base which includes the largest pharmaceutical manufacturers in the US as well as early-stage biotech companies. Beyond our syndicated solutions, we also integrate and synthesize data to deliver unparalleled analytics and insights into various aspects of the 340B program and the pharmaceutical supply chain.
 
The Red Team Engineer will simulate attacks against internally developed applications and infrastructure, using tools and techniques that are common in modern security breaches, to identify vulnerabilities and weakness to various sophisticated attacks, evaluate and continuously improve incident response capabilities, elevate security awareness throughout or organization, and demonstrate compliance across multiple security frameworks.   
 
Responsibilities
  • Design and execute penetration testing and source code review engagements against a variety of web services and software.
  • Conduct research into real-world threat actor tactics, techniques, and procedures to develop playbooks.
  • Maintaining in-depth documentation and auditing of actions taken during Red Team operations to provide deconfliction and non-repudiation.
  • Provide actionable long-term risk mitigation guidance.
  • Partner with engineers and product teams in driving remediation of weaknesses identified in application security review engagements.
  • Stay abreast of the latest cyber security threats, trends, and attack techniques; continuously improve our testing methodologies and tools.
  • Document and present results to a variety of audiences, ranging from technical engineers over non-technical subject matter experts to executive leadership.
 
Qualifications:
  • Minimum 3 years of experience in cybersecurity, or red team operations.
  • Bachelor’s degree in information technology, related discipline, or relevant work experience
  • Relevant Technical Security Certifications: Offensive Security (OSCP, OSEP, OSWA, OSWE), GIAC (GPEN, GWAPT, GCPN, CX-PT), Infosec (CCPT, CMWAPT, CRTOP), EC-Council (LPT Master), etc.
  • Project management, cross-team coordination and driving organizational change.
  • 3+ years’ experience in the following areas:
    • Network penetration testing and manipulation of network infrastructure
    • Web application assessments
    • Scripting or automation of simple tasks using Python, Ruby, Go, etc.
    • Developing, extending, or modifying exploits, shellcode or exploit tools.
    • Source code review for control flow and security flaws
    • Bypassing preventative and detective security controls to accomplish operational goals.
 
Candidate must be able to submit verification of his/her legal right to work in the United States, without company sponsorship. 
 
Salary Range: $100,000-$150,000 per year.
 
#LI-JQ1
#LI-Remote

About BRG

Berkeley Research Group, LLC (BRG) is a global consulting firm that helps leading organizations advance in three key areas: disputes and investigations, corporate finance, and strategy and operations. Headquartered in California with over 40 offices around the world, we are an integrated group of experts, industry leaders, academics, data scientists, and professionals working beyond borders and disciplines. BRG strives to build and nurture a culture where inclusiveness is instinctive, not an initiative. We celebrate and value the diversity of our professionals and are dedicated to maintaining a truly inclusive work environment where all individuals feel respected and valued. We harness our collective expertise to deliver the inspired insights and practical strategies our clients need to stay ahead of what's next.

Berkeley Research Group is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, religion, color, sex, gender, national origin, age, United States military veteran status, ancestry, sexual orientation, marital status, family structure, medical condition including genetic characteristics or information, veteran status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law.

Know Your Rights

EEO is the Law Poster Supplement

Pay Transparency Nondiscrimination Provision

BRG is an E-Verify Employer

Right To Work Poster