Senior Red Operation & Team Penetration Testing Analyst

About the role

The role is within the Red Team within the global SOC at Transamerica, a subsidiary of Aegon. The Red Team conducts advanced adversary emulation operations to challenge assumptions and emulate cyber and criminal threat actors targeting or attacking the business.

Responsibilities

• Find new and creative ways to break technology through either Red Team or Purple Team operations
• Plan, scope, and implement large scale covert operations that have sophisticated goals and significant impact
• Develop new adversary tools, techniques, or methodologies
• Threat Hunting opportunities to partner with the teams Threat Hunters, using our special adversarial talents to discover and eradicate threats
• Engagement in all phases of Red Team security operations
• Perform network reconnaissance and open-source intelligence gathering
• Configure and safely utilize attack tools, tactics, and procedures against authorized targets
• Develop scripts, tools, or methodologies to enhance red teaming capabilities
• Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel
• Provide risk-appropriate and pragmatic recommendations to correct identified flaws, vulnerabilities and misconfigurations

Requirements

• Do No Harm approach: operational objectives cannot come at the expense of others
• Growth Mindset. Excited for opportunities to solve new problems every day
• Helpful demeanor. We are trusted adversaries and trust needs to remain strong
• Customization of Adversarial Tools: Cobalt Strike BOFs, Mythic Agent profiles, and adding new exploits to MSF are examples
• Defender experience and knowledge. Utilizing Splunk and finding risks
• Web application penetration testing assessments
• Email, phone, or physical social-engineering assessments
• Developing, extending, or modifying exploits, shell code or exploit tools
• Network penetration testing and manipulation of network infrastructure
• Relevant, recent and verifiable experience in information security and adversary simulation
• Detail knowledge of global cyber threats, threat actors, and the tactics, techniques and procedures used by cyber adversaries, specifically those targeting the financial services sector
• Industry certifications such as OSCP, OSCE, OSWE, GPEN, GCIH, GWAPT, or GXPN
• 3 or more years of Penetration Testing/Red Team experience
• Ability to define and communicate complex technical risk problems, concepts and situations to multiple skill levels, including business personnel with little to no cyber experience
• Proficiency with Microsoft Office, Preference given to candidates with deep Excel and PowerPoint skill sets
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with systems such as Service Now, JIRA, and equivalent
• Experience with