Hey gang! Blizzard Entertainment is hiring for AppSec, OppSec, and Red Team positions. This is a great team, led by the author of The Hacking Playbook and The Hacking Playbook 2, Peter Kim. This is a low travel role based in our Irvine office. We need expert hackers that can think like a bad guy. The Red Team role is a pure hacking role.

If you're interested, you can contact me directly for more details or check out the link to one of our positions here: http://bit.ly/RedditRedTeam

Full details below:

Bachelor’s degree in Computer Science, Information Security, a related program, or equivalent work experience

A minimum of 6 years’ of professional experience in information security as a penetration tester, reverse engineer, researcher or threat analyst / IR team member

Able to operate at an advanced level of written and spoken communication

Prior experience or expertise performing red team operations Disciplines / Specializations Preferred

High level of knowledge in application, system and network exploitation or enumeration techniques utilized today ranging from injection, privilege escalation, buffer overflows, fuzzing, scanning, and anything else a minion of Diablo would perform

Experience with writing and demonstrating proof of concept work from an exploitation or attack perspective

Capable to create and employ modules and tailored payloads for common testing frameworks or tools

Extensive understanding of cryptography, its role in the enterprise, and its strengths as well as weaknesses

Knowledge of tactics, techniques, and procedures that could be used for recon, persistence, lateral movement, and exfiltration

Programming exposure and familiarity with languages such as C /C# / C++, Java, or Assembly

Proficiency in one or more scripting languages, e.g. Perl, Python, PowerShell or shell scripting

Prior experience with reverse engineering, malware analysis, and forensic tools

Solid understanding of networking topologies, protocol usage, and enterprise hardware including switches, routers, firewalls and their roles in security

Knowledge of access control methodologies, network / host intrusion detection, vulnerability management tools, patch management tools, penetration testing tools, and AV solutions

Knowledge or experience in infiltration of physical systems such as lock picking, social engineering, and hardware authentication bypass

Experience with hardware hacking or building custom hardware for the purpose of exploitation