Lead Engineer, Information Security Red Team

A Red Team Lead operator is a member of the Information Security Assurance group driving security improvement through continuous assessment of our threat landscape. The Red Team is a globally dispersed “testing” team.

Team Duties

Red Team Core (70%): Primarily, as a Red Team operator, you will work closely with team members to plan, deliver and lead sophisticated engagements focusing on high priority, global security objectives. This will take the form of engagements that deliver chained exploits and a full kill-chain of specific recommendations, to demonstrate and explain security gaps in the context of other vulnerabilities. These engagements may include working with externally contracted red teams and exploring new avenues for architecting effective engagements.

Threat Automation and Detection development (15%): you will be developing and recreating atomic red team tests (“TTPs”) not developed as part of Red Team Core duties. These will be used to improve our Blue Team detection and response capabilities.

Infrastructure support and development (15%): you will run, support and maintain our red team-owned tools and infrastructure alongside other team members.

Responsibilities

• Apart from technical abilities, the Lead role requires demonstrated leadership and exceptional competency in the following areas:
• Establishing, documenting, and publishing technical guidance and repeatable processes for the team
• Mentoring team members individually and in groups to strengthen technical capability and execution
• Driving process improvements and integrating advanced methodologies into Red Team engagements
• Understanding business objectives, partnering across departments, and identifying opportunities to improve security outcomes and organizational productivity
• Knowledge and Experience
• University degree in Mathematics, Computer Science, Engineering, or related discipline
• Scripting, software engineering, and system administration
• 4+ years of experience in offensive security consulting or internal Red Team
• Offensive Security Certified Professional (OSCP) certification required; advanced offensive security certifications are preferred