Lead Red Team Engineer

Description:

Responsibilities:

• Conduct research on emerging threats with the aim of replicating and simulating them within the detection lab.
• Provide mentorship to junior members of the red team
• Formulate, strategize, and execute realistic scenarios simulating cyber attacks.
• Take a proactive approach in identifying gaps in detection within IBM Security products, including SIEM and EDR
• Collaborate closely with the blue team, fellow detection engineers, and other security units to refine and bolster our defense strategies.
• Create, adapt, and deploy bespoke exploits and tools for red team operations.
• Continuously advance methodologies to mirror real-world adversarial tactics, techniques, and procedures.

Skills & Qualifications:

• 5+ years in penetration testing, threat intelligence, or general red team operations
• Multiple programming languages: Python, C++, Java, Ruby etc
• In-depth comprehension of security infrastructures, operating systems, network protocols
• Familiar with offensive tools; Metasploit, Cobalt Strike, Mimikatz.
• Knowledge in MITRE ATT&CK evaluation, which is crucial for understanding adversary tactics and techniques.
• Knowledge of CI/CD and Agile software development practices, reflecting a modern approach to security
• Hands-on experience with security solutions such as SIEM, EDR, NDR, and XDR
• OSCP, OCSE, CRT or similar certifications preferred