Red Team Operator, AVEVA

• Offensive security experience and mindset: creating red teaming attack scenarios, weakest entry point, creative approach, multiple methods testing, stealthy approach, pivoting, social engineering, phishing and physical security and anything involving the human element
• Experience with various technologies and comfortable to picking up more (OS / tools / development languages / online technologies etc.)
• Ability to stay on top of the fast-changing mindset of red teaming TTPs and tools that go with it to offer successful red team services
• Understand the defensive side, blue team, Security Operations Center (SOC), and security monitoring and response (SIEM, IDS/IPS etc), as well as EDR (e.g., for bypasses), overall monitoring, detection and indicators of compromise, and creating effective red team activities to test these (e.g., developing / using malware, pivoting, escalating privileges, staying stealthy etc)

Desirable

• You’ll be part of Aveva’s Red Team, assisting the security manager in all manner of engagements and operations. Whether it be executing full spectrum attack simulations, or conducting research to identify novel attack paths and trends of adversary tactics, malware and targeting
• You will also automate attack techniques, creating custom tooling for specific operations and contributing to general purpose open-source tools
• Assist Red Team Security Manager to perform Red Team engagements and operation
• Assist Red Team Security Manager to execute full-spectrum attack simulations (technology, social, physical)
• Perform research to identify novel attack paths for ongoing and future Red Team engagements
• Research trends with regards to adversary tactics, techniques, and procedures, targeting, malware development and implementation
• Support Red Team Security Manager with network/infrastructure design and maintenance for Red Team engagements
• Assist with automation of infrastructure and tool development
• Participate in ongoing interactive Purple teaming activities through use of tools and manual testing
• Support Red Team Security Manager to automate attack techniques, creating custom tooling for specific operations and contributing to general-purpose open-source tools
• Write detailed reports covering the goals and outcomes of Red Team operations, including significant observations and recommendations

• Interested? Great! Get started by submitting your cover letter and CV through our application portal