Red Team Lead

Red Team Lead – US

 

About LRQA

 

LRQA is an award-winning provider of Cyber Security and Assurance, Incident Response and Technology services to organizations across the world.
We have teams that offer world class services in red teaming, penetration testing, threat intelligence, research and development, detection and response, governance, risk, and compliance, and plenty more. Our business is global and so are our clients. We work closely with central banks, central and local government, critical national infrastructure, large retailers, and plenty more besides!

We are looking for the right people to join us as we embrace the challenges thrown up by the advancements within the cyber security industry and within the threats faced. LRQA will be at the forefront of this arena and we want to seek the right people to join the team and make it happen.

You can find out more about us at https://www.lrqa.com
If you want to review our research and tooling, then head on over to https://www.lrqa.com/en/cyber-labs

 

The role

 

We have a dedicated Red Team within our business and due to continued growth we are hiring a Lead Security Consultant to be part of our Red Team.

 

In this role you will be expected to lead and deliver adversary simulation engagements, orchestrating and supporting your team to deliver on agreed objectives. You will be expected to work in challenging environments and deliver under pressure, while maintaining good working relationships with customers. Whilst the role focuses on a high level of competence in technical delivery, it also requires an equally high level of aptitude for consultancy and management, influence and presentation skills.

As a Red Team Lead, you will be required to lead and mentor other members of the team while working with and debriefing executive teams, company boards or regulators.

Every year, we deliver a large number of red teaming engagements for a variety of prestigious clients. The typical delivery time frame is in the region of weeks to months. We start with a threat intelligence phase in order to ensure maximum realism and then we move on to a multi scenario attack phase. Finally, we place great emphasis on detection and response. We see the blue team as our customer and so we go on site to conduct an incident response maturity assessment with them at the end of the engagement.

What you will be doing in your role:

 

In your role you will:

• Plan and execute complex Red and Purple team engagements, Penetration tests and Social Engineering Assessments.
• Take ownership for continued improvement of both the reporting templates and the mentorship of others not achieving high quality reports.
• Deliver both technical and management debriefs, up to executive level.
• Support, contribute to and deliver a number of LRQA training programs, namely LRQA’s Red Team training course.
• Maintain a good working knowledge of Blue team tactics/capabilities, specific to people, processes and technologies. Support and delivery Detection and Response (DRA) assessments and reports where necessary.
• Maintain a good working knowledge of threat actors and their Tactics, Techniques and Procedures (TTP’s).
• Assist Project Delivery in planning and arranging Red team activities, assigning pers