Description
We are seeking a Senior Red Team Operator - VP to join our team. The purpose of this role is to assess and improve the security posture of the organisation by identifying, validating, and helping mitigate weaknesses across information technology (IT) systems, applications, networks, and infrastructure through authorised security testing, adversarial simulation, and threat-based assessment techniques.
Accountabilities
- Plan and deliver offensive security engagements, audits, and threat models to identify vulnerabilities and adversary pathways across the bank’s systems, applications, networks, and infrastructure using offensive security tools and techniques; and communicating actionable findings, risk impact, and remediation recommendations to technical and business stakeholders.
- Collaborate with stakeholders and technology teams to identify emerging cyber-attack techniques, tools, and technologies, and to contribute to the continuous improvement of offensive security methodologies, frameworks, and testing approaches.
- Develop and maintain clear, comprehensive documentation and reports for senior stakeholders, detailing offensive security findings, risk impact, and remediation guidance.
- Collaborate with stakeholders to understand security requirements and existing controls across business processes, applications, and services, in order to enhance the organisation’s overall security posture and assurance.
- Identify emerging vulnerabilities, exploit techniques, and cyber-attack trends to inform the development of offensive security testing methodologies and assurance activities.
- Design and maintain offensive security tooling, infrastructure, and tradecraft, ensuring safe, and controlled operations aligned with legal, ethical, and organisational requirements.
- Support the management of complex cybersecurity incidents by collaborating with information technology (IT), security operations, and incident response teams, providing technical analysis, subject-matter expertise, and advisory input to assist effective investigation and remediation efforts.
Vice President Expectations
- Contribute to setting strategy, driving requirements, and making recommendations for change.
- Plan resources, budgets, and policies; manage and maintain policies/processes; deliver continuous improvements and escalate breaches of policies/procedures.
- Demonstrate leadership and accountability for managing risk and strengthening controls in relation to the work your team does.
- Demonstrate comprehensive understanding of the organisation functions to contribute to achieving the goals of the business.
- Collaborate with other areas of work, for business-aligned support areas to keep up to speed with business activity and the business strategies.
- Create solutions based on sophisticated analytical thought comparing and selecting complex alternatives.
- Adopt and include the outcomes of extensive research in problem-solving processes.
- Seek out, build, and maintain trusting relationships and partnerships with internal and external stakeholders in order to accomplish key business objectives, using influencing and negotiating skills to achieve outcomes.
Requirements
- Experience in developing and enhancing custom tooling, offensive tradecraft, and defense-evasion techniques to emulate sophisticated threat actors and evaluate the effectiveness of security controls, detection, and response capabilities.
- Research, prototype, and execute innovative attack methodologies that advance adversary emulation capabilities and align with the evolving threat landscape.
- Demonstrate expertise in Red Team operations through hands-on security testing, offensive security research, and continuous development toward or attainment of industry-recognized certifications such as OSCP, OSEP, CRTO, CRTP, CREST, CCSAS, CCRTS, or equivalent.
- Leverage programming and scripting skills to build, customize, and automate tools that improve operational efficiency and support complex Red Team engagements.
- Apply strong analytical thinking, creativity, and problem-solving skills to navigate technical challenges, adapt to dynamic environments, and deliver impactful security testing outcomes.
Benefits
- Competitive salary: $175,000 - $225,000 per year
- Medical, dental, and vision coverage
- 401(k)
- Life insurance
- Paid leave for qualifying circumstances
- Eligibility for an incentive award