Role Description
The Red Team Manager will work with a team of cyber security ninjas to perform red team activities simulating known and unknown threat actors, to help CrowdStrike customers train to detect adversaries and stop breaches. This is a highly hands-on, technical leadership role where you'll be expected to actively participate in assessments alongside your team, not just delegate from the sidelines. You'll coordinate with senior leadership, plan and oversee execution of assessments, while remaining deeply involved in the technical work, and assist other CrowdStrike Services functions to help improve customers' security defenses. We need someone capable of rolling up their sleeves to execute complex attack scenarios while simultaneously supporting, managing, and mentoring less experienced red team members.
What You'll Do
-
Lead the design, implementation, and delivery of Red Team offerings, including engagement work, reporting, and metrics.
-
Overseeing the day-to-day operations of the Red Team.
-
Act as a primary contact for coordination of Red Team activities as well as coordinating and leading all penetration testing activities.
-
Responsible for developing and maintaining strong relationships with 3rd party vendors supporting Red Team engagements.
-
Develop reporting including mitigations strategies of results of Red Team activities for both management and technical audiences.
-
Must be able to effectively communicate at all levels (executive leadership and technical support teams) within CrowdStrike.
-
Create and maintain operations, management, and ad hoc reports to monitor the performance of the Red Team.
-
Organize resources to perform penetration testing and tailored red team assessments of operating systems, applications, databases and network infrastructure components to detect, enumerate threats.
-
Work with a diverse team and lead/assist in developing and improving an information security program and information security resources.
-
Work with a Sales team to scope new customer engagements.
-
Must be able to work as an operator and project manager on various types of red team operations.
What You'll Need
-
Minimum 5 years of experience in a Red Team/Penetration Testing activities is highly preferred.
-
Minimum 3 years of experience in a Leadership role is highly preferred.
-
Experience delivering regulatory red team engagements (aligned with TIBER, DORA, CBEST, etc) is desirable.
-
Experience with managing a tool development life cycle and development team.
-
Security community participation (conference speaker, tool development contributor, prior experience delivering training and or contributions to broader security sphere) is highly preferred.
-
Advanced experience with Security Assessment Toolsets (Cobalt Strike, other open source and commercial C2 frameworks, Burp Suite, etc.).
-
Comprehensive understanding of the security methodologies, technologies, and best practices.
-
Windows / Linux / UNIX / Mac operating systems experience.
-
Advanced experience with Networking components (routers, switches, load balancers, wireless access points, etc.).
-
Comprehensive knowledge of firewalls, proxies, mail servers and web servers.
-
Advanced experience with operational support for operating systems, applications and networks.
-
Advanced experience with vulnerability/penetration testing/adversary emulation assessments.
-
Advanced experience in automation and scripting of applications and systems.
-
Desirable Certifications, any of the following: CCRTM/CCSAM, CCRTS, OSEP, GPEN, OSCE, GCIH, GXPN, CRTO, CRTL.
-
Occasional travel may be required (<25%).
Benefits
-
Market leader in compensation and equity awards.
-
Comprehensive physical and mental wellness programs.
-
Competitive vacation and holidays for recharge.
-
Paid parental and adoption leaves.
-
Professional development opportunities for all employees regardless of level or role.
-
Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections.
-
Vibrant office culture with world class amenities.
-
Great Place to Work Certifiedβ’ across the globe.