Skylar (@SecurityWard) header
Skylar (@SecurityWard) profile picture

mastodon: [email protected] Offensive security, nerdiness, dungeons and dragons, and generally a lifelong n00b.

Joined September 2014
Photo by Skylar (@SecurityWard)Photo by Skylar (@SecurityWard)Photo by Skylar (@SecurityWard)Photo by Skylar (@SecurityWard)Photo by Skylar (@SecurityWard)Photo by Skylar (@SecurityWard)Photo by Skylar (@SecurityWard)Photo by Skylar (@SecurityWard)Photo by Skylar (@SecurityWard)Photo by Skylar (@SecurityWard)
Replying to @bsidesnova
@BSidesNoVA talks, villages, and closing ceremony have concluded Have to thank all attendees for attending and learning We also have to thank our partners and sponsors for partnering with and sponsoring us respectively We've made it to 10 years. Thanks for helping us make it here
3
11
398
Don't forget, we have the #BSidesNoVA conference happy hour tomorrow starting at 5 sponsored by @Altus_CC ! Anyone who attends on Fri or Sat can come! Hang out with people in #cybersecurity! Have free food and drink! Wear a costume and win the contest. I'll be dressed up all day!
2
2
256
BSides Hampton Roads starts today with Friday workshops at ODU. Tomorrow: Jon DiMaggio keynote, 3 talk tracks, 2 CTFs, an AI panel, prizes + networking. Saturday GA: $55 🎟️ events.humanitix.com/bsidesh… #BSidesHR
1
1
23
Bring a teammate to BSides Hampton Roads Saturday. 🎤 Keynote 🧠 3 tracks 🏴 2 CTFs 🤖 AI panel 🤝 Networking GA: $55 • ODU 🎟️ events.humanitix.com/bsidesh… #BSidesHR
2
2
46
We are closing our call for papers at EOD September 1st for our conference on October 30-31st. If you have something you would like to give a talk on, or have an idea for a workshop that you'd like to run, go to sessionize.com/bsidesnova-20… and submit something for consideration.
2
2
1
6
1,011
DEFCON 34: You can find our research here: plugandpwn.com
You don't need a USB. You need to look like one. Emulate the device, Windows fetches a signed package off Windows Update and runs vendor code as SYSTEM. Arbitrary code execution, LPE, standard user or empty logon screen. DEF CON 34 talk w/ @Qm9yamFN. Link at the first comment.
7
147
4
715
53,976
The pinball competition is located in the contest area on the first floor again this year, if you come in from the southern entrance go straight and you'll see us on your left at the first intersection. See you soon! #DEFCON34
1
1
73
Who will win the first challenge coin today? #DEFCON #DEFCON34 #Pinball #CTF
We have been authorized to share the challenge coins for this year. SHELL would greatly appreciate your cooperation in this years challenge. Come find SHELL and win the coins at the contest area at DEFCON 34. #DEFCON34
1
1
6
1,760
Swing by Bunnyman Brewing on August 21st at 5:30 PM for Hacker Happy Hour! Drinks on us - just fill out our 10th-year questionnaire to tell us what you want to see at the con. Hang out with the community and enjoy freeplay pinball while you're there! See you soon! #BSidesNoVA
5
10
535
Call for Papers is officially OPEN for BSides NoVA! Whether you're a first-time speaker or a seasoned presenter, we encourage submissions from all backgrounds and experience levels. Submit your talk today! sessionize.com/bsidesnova-20…
11
12
658
Get excited!
Save the date! BSides NoVA is back for our 10th year! Join us October 30-31 as we celebrate a decade of community, collaboration, and cybersecurity. We're just getting started, so stay tuned for this year's theme, CFP, Happy Hours, and more announcements in the coming weeks.
1
2
102
If you’re in the market for an AI-centric offensive security role, please see the below list. Given the positive feedback from last week, I’ll likely start doing this on a weekly basis: 🏛 Company + Role: UnitedHealth Group, AI Red Team Operator 👀 Quick Insights: Remote / Hybrid (Eden Prairie, MN; Washington, DC), Internal AI red team, Individual contributor, Travel: 10% 💰 Comp: $73k-$130k/yr + bonus + equity + benefits 🎯 Apply Here: careers.unitedhealthgroup.co… ✏️ Notes: Standout w/ experience with blue team tools and methods 🏛 Company + Role: Amazon, Senior Manager of AI Red Team 👀 Quick Insights: Remote (United States), Internal AI red team / build and lead, People manager 💰 Comp: $209k-$282k/yr + bonus + equity + benefits 🎯 Apply Here: amazon.jobs/en/jobs/10379285… ✏️ Notes: This role is responsible for building and leading Amazon’s AI offensive security research program. Standout w/ a proven track record of building and scaling security capabilities in complex technology organizations 🏛 Company + Role: Amazon, Manager of Security Engineering, AGI AI Security 👀 Quick Insights: Remote (United States), Internal AI security / strategic, People manager 💰 Comp: $209k-$282k/yr + bonus + equity + benefits 🎯 Apply Here: amazon.jobs/en/jobs/10377518… ✏️ Notes: Standout w/ master's degree in Computer Science and Computer experience managing remote workers 🏛 Company + Role: Leidos, Full Spectrum Cyber AI Researcher 👀 Quick Insights: Remote (United States), Internal AI security / research / automation, Individual contributor, Travel: 10% 💰 Comp: $108k-$196k/yr + benefits 🎯 Apply Here: careers.leidos.com/jobs/1731… ✏️ Notes: Standout w/ demonstrated applied research experience using modern AI techniques for automated or semi-automated penetration testing
1
6
26
2,674
Thread: How real adversaries are using C2 in 2026 (From building @scythe_io + watching nation-state/red team playbooks)  Spoiler: It's not just fancy Cobalt Strike beacons anymore. 🦄 1/10
4
42
2
183
21,177
Every week I share a curated list of red team-specific jobs (or similar/adjacent) that caught my attention. My goal is simple: help job hunters in the offensive security space find a red team-specific role. Below is this week’s list: 🏛 Company + Role: Anthropic, Red Team Engineer (Safeguards) 👀 Quick Insights: Hybrid (San Francisco, CA; Washington, DC), Product abuse + AI safety red teaming, Individual contributor, Travel: yes 💰 Comp: $300k-$320k/yr + benefits 🎯 Apply Here: job-boards.greenhouse.io/ant… ✏️ Notes: Stand out w/ ability to understand and build engagements around emerging threats outside of direct area of expertise 🏛 Company + Role: Booz Allen Hamilton, Offensive Cyber Operations Solutions Architect (Senior Manager) 👀 Quick Insights: Hybrid (Annapolis Junction, MD), Consulting, People manager 💰 Comp: $142k-$266k/yr + benefits 🎯 Apply Here: careers.boozallen.com/career… ✏️ Notes: Requires active TS/SCI clearance + willingness to take poly 🏛 Company + Role: State Street, Cyber Emerging Threat & Purple Team (Managing Director) 👀 Quick Insights: Hybrid (Boston, MA; Clifton, NJ; Kilkenny, Ireland), Internal team, People manager 💰 Comp: $170k-$282k/yr + bonus + benefits 🎯 Apply Here: statestreet.wd1.myworkdayjob… ✏️ Notes: Stand out with past experience and strong understanding of financial services regulatory frameworks and threat-led testing requirements 🏛 Company + Role: Anthropic, Offensive Security Engineer 👀 Quick Insights: Hybrid (San Francisco, CA; Seattle, WA), Internal team, Individual contributor, Travel: yes 💰 Comp: $300k-$320k/yr + benefits 🎯 Apply Here: job-boards.greenhouse.io/ant… ✏️ Notes: Stand out w/ experience conducting adversarial simulations against well defended environments 🏛 Company + Role: Experian, Lead Offensive Security Engineer 👀 Quick Insights: Remote (United States), Internal offensive security / red team, Individual contributor (Lead) 💰 Comp: $133k-$239k/yr + bonus + benefits 🎯 Apply Here: jobs.experian.com/job/lead-o… ✏️ Notes: Somewhat surprisingly, this role seems to include physical red teaming. This could be a really cool role 🏛 Company + Role: 1Password, Principal Security Researcher 👀 Quick Insights: Remote (United States; Canada), Security research leadership, Senior individual contributor 💰 Comp: $246k-$369k/yr + stock + benefits (US); $228k-$342k/yr + stock + benefits (CA) 🎯 Apply Here: jobs.ashbyhq.com/1password/2… ✏️ Notes: The bar is high on this one, but the pay is commensurate 🏛 Company + Role: 1Password, Senior Security Researcher 👀 Quick Insights: Remote (United States; Canada), Product security research, Individual contributor 💰 Comp: $153k-$214k/yr + stock + benefits (US); $144k-$202k/yr + stock + benefits (CA) 🎯 Apply Here: jobs.ashbyhq.com/1password/a… ✏️ Notes: Stand out with proven track record of discovering and responsibly disclosing original vulnerabilities, ideally with published CVEs, advisories, or equivalent publicly-recognized findings 🏛 Company + Role: Invesco, Principal Red Team Operator 👀 Quick Insights: Onsite (Houston, TX; Atlanta, GA), Internal red team, Senior individual contributor 💰 Comp: Not listed + stock + benefits 🎯 Apply Here: invesco.wd1.myworkdayjobs.co…—Red-Team-Operator_R-12989 ✏️ Notes: Stand out w/ prior experience mentoring junior operators + elevating the maturity of the offsec program
1
9
1
48
4,505
🔴 Kremlin spies acquiring network of sites designed to launch sabotage campaigns Read the full story below 🖇️ telegraph.co.uk/world-news/2…
50
436
40
776
61,789
Every week I share a curated list of red team-specific jobs (or similar/adjacent) that caught my attention. My goal is simple: help job hunters in the offensive security space find a red team-specific role. Below is this week’s list: 🏛 Company + Role: Walmart, Principal Incident Response Engineer (Red Team) 👀 Quick Insights: Onsite (Herndon, VA; Bentonville, AR), Comp: $110k-$264k/yr + stock options + benefits, Internal team, Individual contributor 🎯 Apply Here: careers.walmart.com/us/en/jo… ✏️ Notes: There are some really great people on this team who I would vouch for and highly recommend. Overall, this is an excellent opportunity to do red teaming with a Fortune 1; however, the one downside is that it’s not remote. 🏛 Company + Role: MUFG, Red Team Operator 👀 Quick Insights: Hybrid (Tempe, AZ; Jersey City, NJ), Comp: $110k-$135k/yr + bonus + incentives + benefits, Internal team, Individual contributor 🎯 Apply Here: mufgub.wd3.myworkdayjobs.com… ✏️ Notes: This is another excellent opportunity and great team run by fantastic people. Also, I think there are actually 2 of this same position available. 🏛 Company + Role: Knox Systems, Red Team Operator 👀 Quick Insights: Hybrid (New York, NY; Boston, MA; Charlotte, NC; Washington, DC), Comp: $145k-$180k/yr + bonus + equity + benefits, Internal team, Individual contributor 🎯 Apply Here: jobs.ashbyhq.com/knox-system… ✏️ Notes: This is a senior hands on role, intended for operators who prefer active offensive work over admin responsibilities. Public Trust, Secret, or TS/SCI preferred. 🏛 Company + Role: Cloudflare, Red Team Manager 👀 Quick Insights: Hybrid (San Francisco, CA), Comp: not specified, Internal team, People and program manager 🎯 Apply Here: job-boards.greenhouse.io/clo… ✏️ Notes: This is a leadership role overseeing Cloudflare’s red team operations. 🏛 Company + Role: Apple, Senior Security Engineer Red Team 👀 Quick Insights: Onsite (Seattle, WA), Comp: $171k-$302k/yr + RSUs + bonus + relocation + benefits, Internal team, Individual contributor 🎯 Apply Here: jobs.apple.com/en-us/details… ✏️ Notes: This is not your typical red team role; however, if you enjoy vuln research, breaking things, and exploit chains, this could be a good gig. Stand out w/ community contributions like public CVEs, bug bounty recognition, open source tools, blogs, talks etc. 🏛 Company + Role: Little Caesars, Red Team Engineer 👀 Quick Insights: Onsite (Detroit, MI), Comp: not specified, Internal team, Individual contributor 🎯 Apply Here: ilitch.wd5.myworkdayjobs.com… ✏️ Notes: Their pizza sucks and no comp details are available; however, if the pay is right, this could be with considering 🏛 Company + Role: FTI Consulting, Senior Consultant Offensive Security 👀 Quick Insights: Onsite (Sydney, NSW, AU), Comp: $115k-$150k/yr + bonus + excellent benefits, Consulting, Individual contributor 🎯 Apply Here: fticonsult.referrals.selectm… ✏️ Notes: I was asked to try to find/include offsec roles in Australia, and is what I found. I don’t know if this is a good comp for Australia; however, it sounds like a solid role. 🏛 Company + Role: Cyber Advisors, Red Team Lead 👀 Quick Insights: Remote (United States), Comp: $160k-$220k/yr + performance-based incentives + benefits, Consulting, Individual contributor 🎯 Apply Here: cyber-advisors.breezy.hr/p/5… ✏️ Notes: This role is with an MSP and sounds like there would be billable hour expectations.
2
13
1
43
4,938
#SpyNews - week 2 (January 4-10): A summary of 65 espionage-related stories from week 2 coming from 🇷🇺🇳🇴🇮🇷🇮🇱🇺🇸🇫🇷🇧🇫🇻🇪🇱🇻🇺🇦🇸🇪🇩🇪🇨🇳🇹🇼🇨🇦🇹🇷🇸🇾🇬🇧🇿🇦🇲🇽🇮🇹🇾🇪🇸🇦🇯🇵🇰🇵🇬🇷🇸🇩🇦🇿🇨🇭🇦🇺🇵🇭🇲🇰🇺🇿🇰🇷 medium.com/@thespycollection…
10
12
4,869
Happy New Year!
1
36