Business Process Red Team Operator

What you'll do

• Perform and manage hands-on offensive security activities using social engineering against critical firm assets.
• Conduct business process assessments including tabletop sessions and live testing of technical and social engineering controls.
• Design and execute penetration tests, cyber exercises, and resiliency simulations to identify risks and vulnerabilities.
• Evaluate the effectiveness of security controls and identify opportunities to automate control evaluations.
• Develop comprehensive assessment reports detailing findings, risk assessments, and remediation recommendations for senior stakeholders.
• Utilize threat intelligence and security research to enhance the firm's assessment strategy and risk management.
• Develop and refine assessment methodologies, tools, and frameworks to ensure alignment with regulatory requirements.

What we're looking for

• 5+ years of experience in cybersecurity or resiliency with demonstrated organizational skills to plan and coordinate offensive security testing.
• Knowledge of US financial services cybersecurity practices, operations risk management, regulations, and incident response methodologies.
• Proficiency in multiple security assessment methodologies (e.g., OWASP Top Ten, NIST) and offensive testing tools.
• Ability to perform targeted, covert security tests including vulnerability identification, exploitation, and post-exploitation activities.
• Strong understanding of networking fundamentals, various operating systems, and offensive tools like Cobalt Strike, Metasploit, Nmap, Nessus, and Burp Suite.
• Familiarity with AI/ML technologies for Red Teaming, system administration, and cloud architecture security.
• Broad experience in verticals such as call centers, payments processes, and client service organizations.
• Social engineering background (preferred); experience in fraud detection and prevention (preferred); relevant certifications like OSCP, OSEP, or CAMS (preferred).