Cyber Penetration Testing Team Lead

Company Overview

​At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. Our critical communications, video security and command center technologies support public safety agencies and enterprises alike, enabling the coordination that’s critical for safer communities, safer schools, safer hospitals and safer businesses. Connect with a career that matters, and help us build a safer future.

Department Overview

As Motorola's premier cybersecurity consulting group, the cyber professional services team provides in-depth technical, compliance, and governance assessments as well as strategic recommendations for our customer’s and their networks, operational technology and installed Motorola products and platforms. The cyber professional services team provides a full spectrum of cybersecurity services ranging from physical security, vulnerability management, penetration testing, risk management and compliance with frameworks and benchmarks such as CJIS, CIS, ISO, and NIST.

Job Description

• Lead a team of penetration testers in providing our customers with cybersecurity consultive services to aid them in determining the effectiveness of their deployed Cybersecurity controls within Enterprise, Public Safety, P25, E911, Computer Aided Dispatch, Fixed Video and FedRAMP networks and products.

• Assist Sales and Pre-Sales in scoping and executing prospective engagements.

• Work with offer management to produce new cybersecurity services.

• Manage the team's schedule, utilization, equipment and tool requirements and their professional development.

• Track and meet the service sleeve’s contracts, revenue and margin targets.

• Understand and safely use various open source penetration testing tools and when appropriate, emulating hacker tactics, techniques, procedures.

• Provide quality control of reports and work products developed by the team for customer consumption.

• Develop comprehensive and accurate reports and presentations for various consumers of penetration testing results.

• Estimated work load is 1-3 assessments per quarter, consisting of 1-2-week assessments including report writing, maintaining a 50% billable utilization while managing the team’s .

• While in-between assessments, you will be expected to improve any existing processes, develop tools, and potentially find new clients and prospective hires.

• Lead the team in research and development of new and upcoming cyber tactics, techniques and procedures to enhance MSI’s penetration testing processes.

Qualifications

• Bachelor’s degree (or equivalent years experience 7+ in a Cyber role) in a technical field

• Minimum of one (GPEN, CEH, and/or GWAPT) certification required

• 7-10 years' experience in at least three of the following:

  • Network penetration testing and manipulation of network infrastructure

  • Web Application Penetration Testing

  • Email, phone, or physical social-engineering assessments

  • Shell scripting or automation of simple tasks using Perl, Python, or Ruby

  • Developing, extending, or modifying exploits, shellcode or exploit tools

  • Developing applications in C#, ASP, .NET, Objective C, Go, or Java (J2EE)

  • Reverse engineering malware, data obfuscators, or ciphers

  • Source code review for control flow and security flaws

  • Strong knowledge of tools used for wireless, web application, and network security testing

  • Thorough understanding of network protocols, data on the wire, and covert channels

  • Solid understanding of Unix/Linux/Mac/Windows operating systems, including bash and PowerShell

Preferred Skills

• CEH, OSCE, or OSWE or SANS certification

• Ability to travel up to 25%

• Ability to successfully interface with clients (internal and external)

• Ability to document and explain technical details in a concise, understandable manner

• Ability to integrate Artificial Intelligence into the pentesting workflow to include vulnerability discovery, exploitation and assessment documentation generation.

• Ability to ma