Sr Red Teamer

Company Description

We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation. 

Here you can be your authentic self. As a company uniquely positioned to educate, entertain and empower through our platforms, Comcast NBCUniversal stands for including everyone. Our Diversity, Equity and Inclusion initiatives, coupled with our Corporate Social Responsibility work, is informed by our employees, audiences, park guests and the communities in which we live. We strive to foster a diverse, equitable and inclusive culture where our employees feel supported, embraced and heard. Together, we’ll continue to create and deliver content that reflects the current and ever-changing face of the world.

Job Description

We are seeking an advanced and motivated Senior Red Teamer to join our Adversary Simulation Team. The successful candidate will simulate advanced cyber attacks to test the security posture of our organization. This role requires a deep understanding of offensive security tactics, techniques, and procedures (TTPs) and the ability to think like an adversary to identify weaknesses and vulnerabilities in our defenses. This individual will report directly to the Adversary Simulation Senior Manager and provide strategic input and tactical support to drive transformation, maturity, and collaboration across all functions (SOC, Response, Incident Handling, Detection, Intel, Hunting, Security Automation, and Forensics).    

Responsibilities

• Perform Red Team engagements including Stealth and Purple Teaming either individually or in a team.
• Simulate advanced cyber engagements to test the security posture of different businesses that make up the NBCUniversal ecosystem, in addition to developing and executing sophisticated attack scenarios to test detection and response capabilities.
• Collaborate with blue team members in real time to identify and address security gaps
• Summarize the engagement by including information regarding the target in scope, OSINT reconnaissance performed, actions taken, results, and recommendations and provide the reports and summaries on time.
• Document testing progress and findings – compile technical reports and presentations for both technical and executive audiences
• Remain up to date on current attack vectors and reach beyond common Red Team techniques used today.
• Develop new strategies, processes, best-practices, and tools that contribute to our cyber security posture. 
• Ability to adapt work schedule and availability based on engagement requirements.
• Ability to work with all audiences, including the internal team, clients, defense, stakeholders, etc. to explain and/or present vulnerabilities found during engagements and possible methods of mitigating them.
• Provide technical leadership and advise junior team members on attack and penetration test engagements
• When necessary, assist penetration testing team with engagements unrelated to Red Teaming such as PCI, Bug Bounty, and application/product assessments.

Qualifications

• 10+ years in cybersecurity
• 4+ years experience in Red Teaming engagements
• Up-to-date knowledge of current security risks, data breach tactics, and cybersecurity incidents
• Experience running end to end Red Team engagements and how to accomplish testing objectives with minimal system impact and avoid detection as needed.
• Experience operationalizing new and expanding Cyber services
• Advanced experience in source code analysis or 1+ year coding experience in 1 or more languages such as Java, C, C++, C#, ASP.NET, PHP, JavaScript, Python, Objective C, Android, Ruby, Perl, Bash, Powershell
• Advanced experience with assessment tools such as BurpSuite, Metasploit, sliver, kali, setoolkit, aircrack-ng, mimikatz, eyewitness, empire, impacket, rubeus, proxy chains, bloodhound,
• Heavy Experience in Windows, Unix, MacOS, AWS, Azure, GCP, Cloud
• Experience in iOS, Android preferred
• Advanced understanding of network protocols, operating systems, cloud environments, and security architectures including TCP/IP network protocols and