Sr. Red Team Engineer

At Early Warning, we’ve powered and protected the U.S. financial system for over thirty years with cutting-edge solutions like Zelle®, Paze℠, and so much more. As a trusted name in payments, we partner with thousands of institutions to increase access to financial services and protect transactions for hundreds of millions of consumers and small businesses.

Positions located in Scottsdale, San Francisco, Chicago, or New York follow a hybrid work model to allow for a more collaborative working environment.

Candidates responding to this posting must independently possess the eligibility to work in the United States, for any employer, at the date of hire. This position is ineligible for employment Visa sponsorship.

Overall Purpose

The Senior Red Team Engineer position within the Red Team, and Offensive Security Organization is responsible for identifying new and imminent threats, measuring potential impacts to the organization, and creating proof of concept prototypes. This position reports to the Director of Offensive Security.

Essential Functions

• Red Team campaigns and adversary emulation exercises.
• Purple-Team exercises and efficacy tests.
• Impact and Blast-Radius analysis of vulnerabilities and attacks.
• Develop scripts, tools, and methodologies to automate and streamline internal processes and engagements.
• Report generation that clearly communicates campaign and exercise details, results, and remediation recommendations to internal teams.
• Work with internal Security partners to scope engagements and their objectives, as well as to identify complex vulnerabilities and prove real-world impact.
• Identify trends across Security Assessment findings, bug bounty reports, and enterprise vulnerabilities, and work to determine root cause and real-world impact.
• Occasionally support our internal Cyber Security Incident Response and Cyber Threat Intelligence Teams analyzing and replicating Emerging and Active Threats.
• Support the company's commitment to risk management and protecting the integrity and confidentiality of systems and data.
• The above job description is not intended to be an all-inclusive list of duties and standards of the position. Qualified candidates will follow instructions and perform other related duties as assigned by their supervisor.

Minimum Qualifications

• 6 Years of information security experience including at least 2 Years in offensive security positions
• Effective knowledge and experience with tools and techniques used to conduct network, cloud, and web campaigns & exercises, as well as developing new exploits and executing them at scale
• Effective Knowledge of: Threat Modeling, Cloud Security, Cryptography, Authentication & Authorization, and Defensive security & detection techniques (including offensive evasion)
• Effective ability to write and maintain scripts and programs written in PowerShell, Go, and Python
• Strong, professional communication skills (written and verbal)
• Ability to present findings and recommendations to technical and non-technical audiences of all levels
• Bachelor’s degree with a relevant focus or equivalent experience
• Background Check & Drug Screen

Preferred Qualifications

• Experience with adversary emulation toolsets
• Effective ability to move from a single vulnerability to searching organization-wide for impact
• In-depth understanding of the following: MITRE ATT&CK, MITRE CAPEC, and the Cyber Kill Chain
• Experience with Mobile application testing and vulnerabilities
• Hands-on practical Offensive Cybersecurity certifications (OSCP, ePTX, GPEN, HTB CPTS, or equivalent)
• Cloud certifications (SAA/SAP, AWS Security Specialty, or equivalent)

Physical Requirements

Working conditions consist of a normal office environment.  Work is primarily sedentary and requires extensive use of a computer and involves sitting for periods of approximately four hours.  Work may require occasional standing, walking, kneeling, and reaching.  Must be able to lift 10 pounds occasionally and/or negligible amount of force frequently.  Requires visual acuity and dexterity to view, prepare, and manipulate documents and office equipment including personal computers.  Requires the ability to communicate with internal and/or external customers. 

Employee must be able to perform essential functions and physical requirements of position with or without reasonable accommodation.

Candidates responding to this posting must independently possess the eligibility to work in the United States at the date of hire.

 

The base pay scale for this p