Description
We are seeking a Lead Engineer to join our Red Team in the Cyber Fusion Center. The successful candidate will have a strong background in offensive security and will be responsible for conducting and leading operations, contributing to the team, influencing team direction, and collaborating with partner teams.
The Red Team uses adversary simulation to uncover risk in our environment, provide training opportunities to defenders, and measure the processes and technology defending the organization. As a Lead Engineer, you will develop strategic adversary emulation objectives and operational plans, execute adversary emulation operations to surface risk in the organization, work with partner teams to plan cooperative engagements, lead and train operators, communicate effectively with and directly support defenders, present findings and operational work to groups in a clear and professional manner, study the techniques of Threat Actors, and apply that lens to operational work.
Responsibilities:
- Develop strategic adversary emulation objectives and operational plans
- Execute adversary emulation operations to surface risk in the organization
- Work with partner teams to plan cooperative engagements
- Lead and train operators
- Communicate effectively with and directly support defenders
- Present findings and operational work to groups in a clear and professional manner
- Study the techniques of Threat Actors, and apply that lens to operational work
- Partner with other Team Members to improve tools and procedures
- Manage work effectively in the team’s project management tools (Github/JIRA)
- Respond to the quick-changing needs and priorities of the team
- Read and write code to accomplish red team goals
- Deeply understand red team infrastructure
Requirements:
- Four years minimum experience in offensive security and/or defensive security
- Demonstrates strong offensive security knowledge
- Demonstrates strong understanding of the impact of Red Team work on an organization and its customers
- Prioritizes process improvement
- Seeks out cross-functional collaboration opportunities
- Clearly and respectfully communicates technical issues in a training or mentorship setting
- Resolves complex technical issues with minimal assistance
- Builds strong commitment within a team to support the appropriate priorities
- Stays current on relevant technologies with self-directed learning
Desirable Skills:
- Deep Red Team adversary emulation experience
- Experience working on or with Blue Teams, including Incident Response, or Detection
- Experience working in large, complex organizations
- Python, C#, Rust, Go, or C skills
- Solving difficult problems, and creatively subverting systems
- Ability to replicate the tools and techniques of in-the-wild threat actors
- Follows Threat Actor trends impacting organizational security
Benefits:
- Comprehensive health benefits and programs
- 401(k)
- Employee discount
- Short term disability
- Long term disability
- Paid sick leave
- Paid national holidays
- Paid vacation