Analyst, Information Security Red Team

Job Purpose

A Red Team operator is a member of the Information Security Assurance group driving security improvement through continuous assessment of our threat landscape. The Red Team is a globally dispersed "testing" team.

Responsibilities

• Red Team Core (70%): primarily, as a Red Team operator, you will work closely with team members to deliver sophisticated engagements focusing on high priority, global security objectives. This will take the form of engagements that deliver chained exploits and a full kill-chain of specific recommendations, to demonstrate and explain security gaps in the context of other vulnerabilities. These engagements may include working with externally contracted red teams and exploring Artificial Intelligence based applications such as Large Language Models (LLMs).
• Threat Automation and Detection development (15%): you will be developing and recreating atomic red team tests ("TTPs") not developed as part of Red Team Core duties. These will be used to improve our Blue Team detection and response capabilities.
• Infrastructure support and development (15%): you will run, support and maintain our red team-owned tools and infrastructure alongside other team members.

Analyst, Engineer, and Sr. Engineer Distinction
Seniority is determined by experience and demonstration of exceptional competencies including:

• Documenting and effectively publishing technology guidance and repeatable processes
• Mentoring peers in groups and individually
• Improving processes and incorporating advanced methodologies into engagements
• Taking initiative to learn business goals, liaise with other departments, and identify ways to increase productivity in other ICE groups and offices

Desirable Knowledge and Experience

• University degree in Mathematics, Computer Science, Engineering, or related discipline
• Scripting, software engineering, and system administration
• Offensive Security Certified Professional (OSCP) or higher qualification
• Artificial Intelligence background is a plus

ICE Core Competencies

• Teamwork: works well with teammates locally and at remote offices; shares knowledge and is seen as someone to go to for help; contributes in weekly peer meetings.
• Problem solving and decision making: demonstrates a sense of urgency; takes ownership of problems and follows temporary fixes with permanent solutions; finds creative solutions.
• Communication: is clear and accurate in verbal and written communication; listens to peers and supported employees; follows directions and provides useful feedback.
• Professionalism: makes a positive impression in person, via phone, and electronically; models a 'can-do' attitude; embraces additional responsibility; refrains from office gossip or conflict; works extra hours as-needed to ensure work is complete; adheres to corporate policy and encourages others to do the same.