As a Red Team Operator - you will have a deep understanding of computer science and information security.  You understand advanced concepts like exploit development and stealthy operations.  You will be able to help the team accomplish the team’s strategy and goals.  This role will have access to a very diverse network at a company dedicated to providing care to patients across the globe. 

This role will provide YOU the opportunity to lead key activities to progress YOUR career.  The responsibilities include the following:

• Leverage real attacker emulation to simulate security incidents, observe response across monitoring and incidents, and identify enhancement opportunities

• Develop after action reports to help justify this investment and use the results to hone the security posture for the overall organization

• Document identified vulnerabilities and research corrective/remediation actions in order to recommend a risk mitigation technique(s)

• Maintain knowledge of applicable Red Team policies, Standing Ground Rules, regulations, and compliance documents

• Communicate effectively with team members and during an engagement

• Keep current with TTPs and the latest offensive security techniques

Why You?

Basic Qualifications:

• 3+ years of experience as a red team operator

• Experience with offensive tools and platforms such as Kali Linux, Cobalt Strike, Metasploit, Covenant, Sliver, Bloodhound, Ghostpack, Nmap, Nessus, Zmap, Massscan, EyeWitness, Burp Suite

• Experience with writing assessment reports and communicating results to clients, teammates, and senior leadership

• Experience relating to functionality and capabilities of network defense technologies, including firewalls, IDS and IPS, antivirus, and web content filtering

• Experience building red team infrastructure and new approaches to testing a variety of environments

• Market relevant certifications such as CREST/OSCP/OSCE/OSWP

Preferred Qualifications:

• 4+ years’ experience focused on Red Team operations

• Ability to operate and lead organized security testing engagements without assistance

• Familiarity with various programming languages such as Python, Ruby, and Rails are a plus

• Experience in web programming (Java, ASP, ASP.NET, HTML, JavaScript)

• Experience with cloud-based environments (GCP, Azure, AWS, etc.)

• Demonstrated rapid tool development & automation experience

• Regular Expressions (RegEx)

• Knowledge of SQL Server, SQL Client Tools, and T-SQL Stored Procedures

• Understanding of Web Application Firewalls

• Reverse engineering

#LI-GSK

The annual base salary for new hires in this position ranges from $133,450 to $180,550 , taking into account a number of factors including work location, the candidate’s skills, experience, education level and the market rate for the role. In addition, this position offers an annual bonus and eligibility to participate in our share based long term incentive program which is dependent on the level of the role. Available benefits include health care and other insurance benefits (for employee and family), retirement benefits, paid holidays, vacation, and paid caregiver/parental and medical leave.

Please visit GSK US Benefits Summary to learn more about the comprehensive benefits program GSK offers US employees.

Why GSK?

Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a special purpose – to unite science, technology and talent to get ahead of disease together – so we can positively impact the health of billions of people and deliver stronger, more sustainable shareholder returns – as an organisation where people can thrive. We prevent and treat disease with vaccines, specialty and general medicines. We focus on the science of the immune system and the use of new platform and data technologies, investing in four core therapeutic areas (infectious diseases, HIV, respiratory/ immunology and oncology).

Our success absolutely depends on our people. While getting ahead of disease together is about our ambition for patients and shareholders, it’s also about making GSK a place where people can thrive. We want GSK to be a place where people feel inspired, encouraged and c