Senior Offensive Security Operator

JLL empowers you to shape a brighter way.  

Our people at JLL and JLL Technologies are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented people  and empowering them to  thrive, grow meaningful careers and to find a place where they belong.  Whether you’ve got deep experience in commercial real estate, skilled trades or technology, or you’re looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward.   

Senior Offensive Security Operator

This position will be responsible for designing and delivering, both individually and collaboratively, security testing against a range of technologies and operational processes to continuously assess JLL’s global attack surface.  The role will execute and provide custom written deliverables related to testing and remediation or mitigation guidance across a variety of engagements that are planned and ad hoc; long and short term; disclosed and undisclosed.   The ideal candidate will be experienced and comfortable simulating adversaries with a range of capabilities and intents representative of the threat landscape.

Primary Responsibilities

• Plan, execute, and report on testing against managed and unmanaged devices running Windows, Linux, MacOS, and iOS
• Plan, execute, and report on authenticated and unauthenticated web application testing, to include executing specific attack methodologies targeting API vulnerabilities
• Plan, execute, and report on testing against cloud environments with a focus on identifying gaps in cloud-native security configurations
• Plan, execute, and report on testing against embedded systems, with an emphasis on OT employed in commercial property technologies
• Plan, execute, and report on testing against physical security and Wi-Fi vulnerabilities
• Ability to develop and execute custom tools as necessary
• Ability, as part of Purple Team engagements, to develop and validate detection methodologies based on testing findings
• Ability to advise developers on code-based fixes to address application vulnerabilities discovered during testing
• Ability to advise on hardening as well as identity proofing and authentication mechanisms to address vulnerabilities identified during testing

Job Requirements

• 8+ years of technical cybersecurity experience with at least 5 years of offensive security experience
• Experience developing and conducting Red Team and Purple Team engagements against Enterprise IT users and online applications
• Experience with vulnerability discovery within and exploitation of embedded systems
• Experience with reverse engineering both firmware and software
• Experience developing and deploying custom persistence and exfiltration tools
• Experience writing and delivering reports from testing engagements
• Experience leveraging testing findings to develop detection and prevention methodologies leveraging security technologies to include SIEM and EDR
• Experience executing web application penetration tests
• Ability to communicate remediation guidance to developers
• Ability to adapt and prioritize in a fast-paced work environment
• Excellent written and oral communication skills
• Work independently and within a team to build relationships and interact effectively with business partners.
• A desire to work within a diverse, collaborative, and driven professional environment.

Estimated total compensation ran for this position is:

140,000.00 – 190,000.00 USD per year

The pay range listed is a total compensation range including bonus, if applicable. The provided range is an estimate and not guaranteed. An employment offer is based on applicant’s education, experience, skills, abilities, geographic location, internal equity and alignment with market data.

Location:

Remote –Chicago, IL

If this job description resonates with you, we encourage you to apply, even if you don’t meet all the requirements.  We’re interested in getting to know you and what you bring to the table!

Personalized benefits that support personal well-being and growth:

JLL recognizes the impact that the workplace can have on your wellness, so we offer a supportive culture and comprehensive benefits package that prioritizes mental, physical and emotional health. Some of these benefits may include:

• 401(k) plan with matching company contributions

• Comprehensive Medical, Dental & Vision Care