ACCPRO INTERNATIONAL
Senior Penetration Testing Engineer (Red Team/ Advanced Offensive Security Specialist) Job Objectives: Achieve practical control over core servers, macOS terminals, and high-value enterprise assets (such as code signing certificates and keys) through covert and multi-dimensional attack methods. Key Responsibilities High-Strength Anti-Virus Bypass Practice : Responsible for anti-virus bypassing of Trojans and backdoors. Must be able to bypass mainstream antivirus software and top-tier EDRs (such as CrowdStrike, SentinelOne, and Huorong Enterprise Edition) through secondary development, code obfuscation, and memory loading techniques. macOS Terminal Penetration: Conduct precise penetration testing on target Mac computers. Research and utilize techniques such as TCC bypass, Keychain extraction, and trusted application permission hijacking to obtain core confidential information without triggering system alerts. Supply Chain and Pipeline Attacks: Penetrate and control automated build environments such as Jenkins, GitLab CI, and GitHub Actions to obtain certificates and sensitive configurations stored in the pipeline. Intranet Deep Lateral Movement: After gaining initial access, skillfully utilize various covert tunnels (DNS/ICMP/HTTP) to roam the intranet, achieving cross-region penetration from the office network to the core development network. Social Engineering Drills : Plan and execute precise, targeted attacks against specific individuals (developers, system administrators) to breach the first line of defense. Qualifications Must be Fluent in both English and Mandarin Red Team Experience: 3-5 years of frontline penetration testing experience, with experience in network security protection or large enterprise internal red team operations. Antivirus Evasion Development Capabilities: Proficient in Python, Go, or C++. While developing a C2 vulnerability from scratch is not required, the ability to modify open source loaders or tools is essential, along with the ability to quickly resolve antivirus warnings in real-world scenarios. Proficient in macOS Penetration Logic: Deep understanding of macOS access control (SIP/TCC). Knows how to maintain access without disabling SIP and understands Apple's code signing and notarization processes. Proficient in Internal Network Penetration: Proficient in lateral movement techniques (credential theft, proxy cascading, domain penetration). Able to handle data outflows in restricted environments. Web and Logic Vulnerability Expert: Skilled at uncovering logical flaws at the business level and able to access target servers through advanced vulnerabilities such as SSRF and deserialization. Preferred Qualifications Existing mature Bypass EDR solutions within non-public circles. Real-world case studies of successfully penetrating and acquiring high-value assets. Familiarity with mobile application (IPA/APK) distribution processes and related management backends (MDM/enterprise distribution platforms) Work Arrangements: Employment Type: Full-time Work Set-up: Remote Work Schedule: 6 days a week Work Location: Remote
ACCPRO INTERNATIONAL
