Lead Engineer, Information Security Red Team

About the role

The Red Team Lead is a member of the Information Security Assurance group, which drives security improvement by continuously assessing the threat landscape. The Red Team is a globally dispersed testing team. The role is split between core Red Team operations, threat automation and detection development, and infrastructure support.

Key responsibilities

• Plan, deliver and lead sophisticated engagements focused on high-priority, global security objectives, producing chained exploits and a full kill chain of recommendations that expose security gaps alongside other vulnerabilities
• Work with externally contracted red teams and explore new ways to design effective engagements
• Develop and recreate atomic red team tests (TTPs) to improve Blue Team detection and response capabilities
• Run, support and maintain the red team's tools and infrastructure
• Establish, document and publish technical guidance and repeatable processes for the team
• Mentor team members individually and in groups to strengthen technical capability and execution
• Drive process improvements and integrate advanced methodologies into Red Team engagements
• Partner across departments to understand business objectives and improve security outcomes and productivity

Required profile

• University degree in Mathematics, Computer Science, Engineering or a related discipline
• 4+ years of experience in offensive security consulting or internal Red Team work
• OSCP certification required; advanced offensive security certifications preferred
• Demonstrated leadership and ability to establish guidance, mentor others and drive process improvements

Required skills

• Scripting
• Software engineering
• System administration