Managing Principal Security Consultant

Job ID:39087
Location: 810 Seventh Avenue, Suite 1110, New York, NY 10019
Position Category:Information Technology
Position Type:Employee Regular

About Nettitude

 

At Nettitude, we are passionate about cybersecurity and managing cyber risk – keeping our clients data and business secure and protected at every stage of its journey. We aim to be ‘their trusted cyber partner’. Founded in 2003, Nettitude is an award-winning provider of cybersecurity services, bringing innovative thought leadership to the ever-evolving cybersecurity marketplace.

 

Leveraging our tenacious curiosity, we aim to operate at the forefront of the industry. Through our research and innovation centers, Nettitude provides threat led services that span technical assurance, consulting and managed detection and response offerings.

 

We are driven by a desire to build and deliver the best cybersecurity propositions in the industry and stay abreast of the evolving legislative and regulatory cybersecurity landscape. This helps our clients to prioritize their cybersecurity risks, enabling them to focus on the activities that are core to their business.

 

We provide pragmatic cybersecurity for industries such as Finance & Banking, IT, Technology and Engineering, Maritime, Offshore, Retail, Healthcare, Manufacturing and Critical National Infrastructure.

 

You can find out more about us at www.nettitude.com. If you want to review our research and tooling, then head on over to https://labs.nettitude.com. 

 

The Role:

             

1. Provide threat‐led cyber services to organizations around the globe, helping them to manage and protect themselves against cyber security threats and risks.
2. Serve as main focal point for the technical delivery of highly sophisticated attack simulations, while operating under legal standards, regulated frameworks and co‐ordinating a minimal risk‐based approach.
3. Utilize knowledge of the legal requirements and industry regulatory frameworks (e.g. *BEST, TIBER‐EU, C‐RAF iCAST, AASE, TIBER‐Fl, CORIE, FEER) that each environment operates under.
4. Operate multiple engagements at once, orchestrate and support team to deliver on agreed objectives.
5. Perform technical delivery with high level of competence.
6. Manage and mentor employees while working with and debriefing executive teams, company boards or regulators such as central banks.
7. Identify areas of weakness with internal processes, products, delivery, skillset, etc., and drive internal initiatives to help address these areas.
8. Understand overall business plan, and the advisory services department's annual business plan.
9. Responsible for strategically important areas of the team, for example development and running of the ATAS training course.
10. Plan and execute complex Red and Purple Team engagements, Penetration tests and Social Engineering Assessments.
11. Take ownership for continued improvement of both the reporting templates and the mentorship of others not achieving high quality reports.
12. Deliver both technical and management debriefs, up to executive level.
13. Support, contribute to and deliver a number of Nettitude training programs, namely Nettitude's Red Team training course, delivered privately and at conferences.
14. Maintain a solid working knowledge of Blue Team tactics/capabilities, specific to people, processes and technologies.
15. Support and delivery Detection and Response (DRA) assessments and reports where necessary.
16. Maintain a good working knowledge of threat actors and their Tactics, Techniques and Procedures (TTP's).
17. Assist Project Delivery in planning and arranging Red Team activities, assigning personnel and managing workloads.
18. Co‐ordinate delivery of Red Team risk workshops, Threat Intelligence handover and project setup meetings with customers.
19. Create robust and coherent test plans, or provide quality assurance of any test plans.
20. Carry out or support technical research that increases Nettitude's delivery capability and industry awareness.
21. Support the sales team in procurement of Red Team services: Responding to RfP's and other proposals; Presales to support the effective communication of the Red Team service and set appropriate expectations; Onsite presentation of Red Team service to executive level audiences; Regular training provided to the sales team to upskill the knowledge of the Red Team service and current terminology.
22. Reporting: Create high quality and thorough technical and management reports, which are appropriately directed to their intended audience; Providing Quali