As a Red Team Operator - you will have a deep understanding of computer science and information security. You understand advanced concepts like exploit development and stealthy operations. This role will have access to a very diverse network at a company dedicated to providing care to patients across the globe.

This role will provide YOU the opportunity to lead key activities to progress YOUR career. The responsibilities include the following:

• Leverage real attacker emulation to simulate security incidents, observe response across monitoring and incidents, and identify enhancement opportunities
• Develop after action reports to help justify this investment and use the results to hone the security posture for the overall organization
• Execute Red Team engagements in a variety of networks using real-world adversarial Tactics, Techniques, and Procedures (TTPs) from conception to report delivery
• Conduct open-source intelligence gathering, network vulnerability scanning, exploitation of vulnerable services, lateral movement, install persistence in a target network(s), and manage C2 infrastructure
• Develop payloads, scripts and tools that weaponize new proof-of-concepts for exploitation, evasion, and lateral movement
• Document identified vulnerabilities and research corrective/remediation actions in order to recommend a risk mitigation technique(s)
• Maintain knowledge of applicable Red Team policies, regulations, and compliance documents
• Communicate effectively with team members and during an engagement
• Keep current with TTPs and the latest offensive security techniques

Why You?

Basic Qualifications:

We are looking for professionals with these required skills to achieve our goals:

• 3+ years of experience as a red team operator
• Experience with offensive tools and platforms such as Kali Linux, Cobalt Strike, Metasploit, Covenant, Sliver, Bloodhound, Ghostpack, Nmap, Nessus, Zmap, Massscan, EyeWitness, Burp Suite
• Experience with writing high-quality assessment reports and communicating results to clients, teammates, and senior leadership
• Knowledge of functionality and capabilities of network defense technologies, including firewalls, IDS and IPS, antivirus, and web content filtering
• Experience building red team infrastructure and new approaches to testing a variety of environments
• Have experience to operate and lead organized security testing engagements without assistance

Preferred Qualifications:

If you have the following characteristics, it would be a plus:

• 4+ years’ experience focused on Red Team operations
• Market relevant certifications such as CREST/OSCP/OSCE/OSWP
• Familiarity with various programming languages such as Python, Ruby, and Rails are a plus
• Experience in web programming (Java, ASP, ASP.NET, HTML, JavaScript)
• Experience with cloud-based environments (GCP, Azure, AWS, etc.) and with AI Systems – building, utilization, threat modelling, and testing
• Demonstrated rapid tool development & automation experience
• Regular Expressions (RegEx)
• Knowledge of SQL Server, SQL Client Tools, and T-SQL Stored Procedures
• Understanding of Web Application Firewalls
• Reverse engineering

#LI-GSK

The US annual base salary for new hires in this position ranges from $127,500 to $212,500. The US salary ranges take into account a number of factors including work location within the US market, the candidate’s skills, experience, education level and the market rate for the role. In addition, this position offers an annual bonus and eligibility to participate in our share based long term incentive program which is dependent on the level of the role. Available benefits include health care and other insurance benefits (for employee and family), retirement benefits, paid holidays, vacation, and paid caregiver/parental and medical leave. If salary ranges are not displayed in the job posting for a specific country, the relevant compensation will be discussed during the recruitment process.

Please visit  GSK US Benefits Summary to learn more about the comprehensive benefits program GSK offers US employees.

Why GSK?
Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company