Business Process Red Team Operator

What you'll do

• Perform and manage hands-on offensive security activities including social engineering attacks against critical assets.
• Conduct business process assessments through tabletop sessions and live testing of technical and social engineering controls.
• Design and execute risk-driven simulations, penetration tests, and cyber exercises to identify vulnerabilities.
• Develop and refine assessment methodologies, tools, and frameworks to ensure alignment with firm strategy and regulations.
• Evaluate the effectiveness of preventative controls and identify opportunities to automate control evaluations.
• Produce comprehensive reports detailing findings, risk assessments, and remediation recommendations for senior stakeholders.
• Utilize threat intelligence and security research to enhance the firm's assessment strategy and risk management.
• Perform covert security tests involving vulnerability identification, exploitation, and post-exploitation activities.

What we're looking for

• 5+ years of experience in cybersecurity or resiliency.
• Proficiency in offensive security activities including social engineering, penetration testing, and adversary emulation.
• Knowledge of networking fundamentals, operating systems (Windows/Linux/Unix/Mac), and software exploitation techniques.
• Experience with offensive tools such as Cobalt Strike, Metasploit, Nmap, Nessus, and Burp Suite.
• Familiarity with AI/ML technologies in Red Teaming and cloud architecture security.
• Knowledge of US financial services cybersecurity practices, risk management, and regulatory requirements.
• Ability to perform covert security tests including vulnerability identification and post-exploitation activities.
• Strong communication skills to report complex technical findings to senior stakeholders.