Talution Group
http://cdn.haleymarketing.com/templates/61733/logos/talution-hml.png
http://www.talution.com
http://www.talution.com
true
Sr Security Engineer - Red Team (Chicago or New York)
Job Description
Sr Security Engineer (Red Team)
Principal Responsibilities
- Lead red team exercises against a hybrid environment using threat intelligence and the MITRE ATT&CK Framework.
- Participate in purple team exercises that are intelligence driven to test cyber detections
- Build and maintain Red and Purple team infrastructure, automating functions where possible.
- Continually research new offensive security tactics, techniques, and procedures and communicate knowledge of the same to other team members.
- Conduct ad-hoc offensive security testing using industry standard tools and/or internally developed tools.
- Lead report creation activities including compromise narratives and detailed technical findings with appropriate risk severity ratings, tactical and strategic recommendations to reduce risk levels, peer review of team’s deliverables.
- Assist cyber defense teams during incident investigations providing subject matter expertise on attacker tradecraft and mindset.
- Interface with other information security departments, as well as other technology departments and business stakeholders to raise awareness of security issues and to provide knowledge sharing on remediation.
- Active contributor to Red and Purple Team activities for internal presentations and conferences
Requirements
- Approx 8 years’ experience with industry standard Red Team testing tools (Cobalt Strike, Mythic C2, Rubeus, Bloodhound, Covenant, etc.); or the ability to demonstrate equivalent knowledge.
- Expert understanding of how an Advanced Persistent Threat could compromise a financial institution without using phishing.
- Expert understanding of Red Team concepts, tools, and automation strategies.
- Expert understanding of MITRE ATT&CK framework tactics, techniques, and procedures.
- Expert understanding of measuring and rating vulnerabilities based on principal characteristics of a vulnerability.
- Expert understanding of Windows and Linux system hardening concepts and techniques.
- Expert understanding of modifying payloads to bypass detections like EDR.
- Expert understanding of how to compromise a company without using phishing.
- Strong understanding with at least one scripting language (Python, Ruby, PowerShell, Bash, etc.).
- Experience with at least one cloud environment (AWS, GCP, Azure).
- Experience attacking cloud, on-prem and/or hybrid environments from initial access all the way through actions on objective.
Nice to have
- Previous experience of Red Team project delivery to include creation and execution of statement of work, risk mitigation strategies, and working with stakeholders to remediate findings.
- Experience of using multi operating system command and control tools.
- Experience developing custom attack tradecraft or modifying existing tools.
- Experience using automated configuration management such as Chef.
- Experience discovering and exploiting vulnerabilities in AI systems.
- Experience of conducting Offensive Security and/or Red Team exercises against macOS, iOS, or ChromeOS.
- Recognized industry certifications such as, but not limited to, GPEN, GXPN, GREM, eCPTX, eCPPT, OSCP, OSWE, CISSP, CPSA, CRT, etc.
- Knowledgeable in Industry Security standards (i.e.: TIBER-EU, CBEST, NIST Cyber Security Framework, ISO27002, etc.).
- Knowledgeable in Agile project management.
This is a hybrid role. This role is to be filled outside the states of California and Colorado.
**We are an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, color, ethnic origin, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.**
#LI-RD1
Meet the Recruiter
Share This Job:
Related Jobs:
Login to save this search and get notified of similar positions.About Chicago, IL
Unlock your potential in the bustling job market around Chicago, Illinois! Dive into a world of endless possibilities and growth opportunities in the Windy City and its vibrant suburbs. From iconic landmarks like the Willis Tower and Navy Pier to the world-class cuisine of deep-dish pizza and Chicago-style hot dogs, this area is rich in culture and charm. Immerse yourself in the thriving arts scene at the Art Institute of Chicago or enjoy a night out at the renowned Second City comedy club. With top-notch theaters, professional sports teams like the Cubs and the Bears, and lush green spaces like Millennium Park, Chicago offers an unbeatable lifestyle for career-driven individuals. Explore our job listings today and discover why Chicago is the perfect place to kickstart your career journey!