Senior Manager-CyberOps & Assurance (Red Team)

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

The American Express Red Team improves the overall security posture of the enterprise by utilizing tactics, techniques, and procedures (TTPs) to simulate advanced adversarial threats.  Red Teaming is ultimately about two things:  determining how vulnerable we are by uncovering gaps such as misconfigurations, bugs, and exploitable conditions, and identifying blind spots in our ability and our readiness to react.  We will achieve this through testing, training, and measuring the effectiveness of the people, processes, and technologies that defend the environment.  We will determine, via adversary emulation, which attack behaviors would allow legitimate attackers to achieve specific objectives via cyber, physical, and human means.  An objective-based adversary simulation approach ensures the Red Team maintains focus.  

Key Responsibilities

• Leading and performing Red Team testing; adversary simulation/emulation and threat simulation/emulation, social-engineering testing, and EDR/NDR/XDR evasion techniques.
• Leveraging cyber threat intelligence to create procedure-level adversary simulation plans mapped to MITRE ATT&CK
• Configuring and utilizing attacker tools, tactics, and procedures for enterprise environments in an ethical manner
• Developing comprehensive and accurate reports/presentations for both technical and executive audiences
• Through reiterative processes, continually define the Red Team strategy to further enhance the company’s security posture
• Effectively communicating findings and strategy to stakeholders including technical staff, executive leadership, and legal counsel
• Collaborate with colleagues to provide guidance on remediation strategies that will help improve security posture
• Providing risk-appropriate and pragmatic recommendations to address observations found during testing
• Developing scripts, tools, or methodologies to enhance our offensive security processes and tradecraft
• Driving technical oversight and mentors less experienced staff during red team, response, and analysis efforts
• Providing leadership and guidance to advance the offensive capabilities of the team and its subsequent ability to defend the enterprise
• Research and develop innovative techniques, tools, and methodologies for offensive security practice services
• Build tooling to automate portions of assessments

Qualifications

• Bachelor's degree or five or more years of relevant work experience in ethical hacking, offensive security, and or DevSecOps
• Hold one or more Industry certifications such as GXPN, GSEP, GCIH, GWAPT, OSCP, OSCE, OSWE, or OSCE3
• Licensed or certified in 3 of these 5 areas:  Attacking AI, AWS Red Teaming, Adversary Tactics for MacOS, Cloud Penetration Testing, Red Team Operations
• 5 or more years of relevant experience in Adversar