Synack Red Team - Penetration Tester (Remote)

The Synack Red Team (SRT) gives the most talented cybersecurity researchers across the globe a platform to do what they love and get paid for it. As a private community of highly-curated and vetted security penetration testers, the SRT is challenged every day to deliver vulnerability intelligence for the public sector and some of the biggest brands in the world. SRT members determine for themselves when they work, how much they work, and where they work in the United States. All that is needed is a stable internet connection to connect to Synack’s FedRamp authorized cloud platform, at-least a few hours a week, and a genuine interest to secure and protect public sector systems.

Please Read To Ensure Proper Application Review:

● ONLY Apply using your Legal Name
● Please make sure any certifications / presentations / CVEs / social profiles you provide in the application are publicly verifiable (see below)
● Job titles should include descriptions with detailed responsibilities
● Recommended: For best results, make sure that your resume formally lists any/all penetration testing, offensive security or red teaming experience that should be considered.

Requirements:

● Applicants must be able to pass an ID and background check to join the Synack Red Team.
● Applicants must be a citizen of one of the following countries:
○ United States, Canada, United Kingdom, Australia, or New Zealand.
■ Note: Applicants must declare any dual citizenships.
● Applicants must NOT be employees or contractors of crowdsourced security / bug bounty companies.
● Conflicts of Interest: Synack Red Team has numerous members that are current government employees and / or active duty military. Synack recommends that applicants discuss SRT with their direct leadership to understand any restrictions that may apply so they can self-manage potential conflicts of interest on a per-opportunity basis.
○ Note: Most agencies, departments and units are receptive to SRT participation.
● Applicants must have demonstrable / documented experience in the following discipline of offensive security / penetration testing: Web App, Network / Host, API, Mobile, or AI / LLM.
- Recommended: Applicants with government issued clearances, such as Secret, TS and TS-SCI, or experience testing specific agencies, may be eligible for additional public sector projects and opportunities.

Priority Experience:

The following accolades will be considered as documented expertise in offensive security / penetration testing for prioritized onboarding. Any experience / certifications provided not listed below will be subject to consideration based on past job descriptions, tasks, and red-team projects.

● Former or Active - Public Sector Roles
○ Military
■ Air Force / Space Force
● Cyber Warfare Operations Officer (17S)
● Cyber Systems Operations (3D0X2)
■ Navy
● Cyber Warfare Engineer (1810)
● Information Warfare Officer (1810)
● Cybersecurity Specialist (IS/CT)
■ Army
● Cyber Warrant Officer (WO1 to CW5)
● Cyber Operations (17A & 17C)
■ Marines
● Cyber Effects Officer (1702)
● Cyber Operations Officer (1721)
● Data Systems Technician (0671)* (requires proof of offensive security)
● Network Specialist (0639)* (requires proof of offensive security)
○ Government
■ Penetration Tester
■ Red Team Member / Operator
■ Vulnerability Analyst / Researcher
■ Cybersecurity Researcher / Engineer
■ Cyber Operations
○ Industry Certifications
■ Priority
● Hack The Box - Certified Penetration Testing Specialist (CPTS)
● Offensive Security - OSCE³ (OSCE³) includes OSCE
● Offensive Security - WEB-300 (OSWE)
● Offensive Security - PEN-300 (OSEP)
● Offensive Security - WEB-200 (OSWA)
● Offensive Security - PEN-200 (OSCP)
● PortSwigger - Burp Suite Certified Practitioner (BSCP)
● SANS - GIAC Experienced Penetration Tester (GX-PT)
● SANS - SEC 542 w/GWAPT
● SANS - SEC 560 w/GPEN
, ● SANS - SEC 660 w/GXPN
● SANS - SEC 575 w/GMOB
■ Additional:
● API Security University - API Security Certified Professional (ASCP)
● CREST Registered Penetration Tester (CRT)
● TCM - Practical Career-Ready Professional (PCRP + PNPT, combo required)
● The SecOps Group - CAPen + CNPen (combo required)
○ a.k.a. Black Hat Certified Pentester (BC

Diversity / Inclusion:

Synack is committed to embracing diversity. Our people are our strength. Each addition to our community is an opportunity to grow and diversify our ideas, experiences, and viewpoints. We strive to be inclusive of Race, Ethnicity, Religion, Sex, LGBTQ+, Veterans, Disabilities, and Age. Synack and the SRT welcomes you!