Lead the design, implementation, and delivery of Red Team offerings, including engagement work, reporting, and metrics.
Overseeing the day-to-day operations of the Red Team.
Act as a primary contact for coordination of Red Team activities as well as coordinating and leading all penetration testing activities.
Responsible for developing and maintaining strong relationships with 3rd party vendors supporting Red Team engagements.
Develop reporting including mitigations strategies of results of Red Team activities for both management and technical audiences.
Must be able to effectively communicate at all levels (executive leadership and technical support teams) within CrowdStrike.
Create and maintain operations, management, and ad hoc reports to monitor the performance of the Red Team.
Organize resources to perform penetration testing and tailored red team assessments of operating systems, applications, databases and network infrastructure components to detect, enumerate threats.
Work with a diverse team and lead/assist in developing and improving an information security program and information security resources.
Work with a Sales team to scope new customer engagements.
Must be able to work as an operator and project manager on various types of red team operations.
Requirements
Minimum 5 years of experience in a Red Team/Penetration Testing activities is highly preferred
Minimum 3 years of experience in a Leadership role is highly preferred
Experience delivering regulatory red team engagements (aligned with TIBER, DORA, CBEST, etc) is desirable
Experience with managing a tool development life cycle and development team
Security community participation (conference speaker, tool development contributor, prior experience delivering training and or contributions to broader security sphere) is highly preferred
Advanced experience with Security Assessment Toolsets (Cobalt Strike, other open source and commercial C2 frameworks, Burp Suite, etc.)
Comprehensive understanding of the security methodologies, technologies, and best practices
Windows / Linux / UNIX / Mac operating systems experience