Сильная senior-позиция в кибербезопасности у крупной продуктовой компании: задачи понятны, направление востребовано, предусмотрены удалённая работа и хорошие льготы. Стоит учесть периодические поездки и тестирование на алкоголь или наркотики.
Ниже рынка
Понятные задачи
Актуальная кибербезопасность
Хорошие льготы
Тестирование
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Red Team Services Sr. Consultant (Cybersecurity): Performing red team and penetration assessments across operating systems, applications, databases, and network infrastructure with an accent on adversary emulation, MITRE ATT&CK, and threat actor simulation. Focus on planning and executing complex assessments, communicating findings to executive and technical stakeholders, and using automation and AI technologies to improve security operations.
Location: USA - Remote; occasional travel may be required, less than 25%.
Base salary: $115,000–$165,000 per year for U.S. candidates, plus eligibility for bonuses and equity grants.
Company
CrowdStrike is a cybersecurity company providing an AI-native platform that protects organizations from breaches across large-scale distributed systems.
What you will do
Perform red team and penetration assessments of operating systems, applications, databases, and network infrastructure.
Simulate known threat actors and assess their ability to achieve objectives across the Kill Chain and MITRE ATT&CK Framework.
Plan and execute assessments, producing written and verbal reports, presentations, findings, and security recommendations for customer management.
Coordinate with executive leadership, technical support teams, and other CrowdStrike Services functions.
Lead or support the development and improvement of information security programs and resources.
Provide specialized operational guidance during enterprise-wide crisis scenarios and operate penetration testing engagements with an OPSEC mindset.
Requirements
At least 5 years of experience in red team or penetration testing activities is highly preferred.
Advanced experience with security assessment tools including Metasploit, NMAP, Cobalt Strike, Nessus, and Burp Suite.
Comprehensive understanding of security methodologies, technologies, and best practices.
Experience with Windows, Linux, UNIX, and Mac operating systems.
Advanced experience with networking components such as routers, switches, load balancers, and wireless access points.
Comprehensive knowledge of firewalls, proxies, mail servers, and web servers.
Advanced experience supporting operating systems, applications, and networks, as well as conducting vulnerability testing, penetration testing, and adversary emulation assessments.
Advanced experience automating and scripting applications and systems.
Proven experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
Ability to communicate effectively with executive leadership and technical support teams.
Nice to have
Participation in the security community, such as conference speaking or tool development contributions.
OSCP, GPEN, OSCE, GCIH, or GXPN certification.
Culture & Benefits
Remote role with flexibility and autonomy.
Competitive compensation, equity awards, bonuses, health insurance, 401(k), and paid time off.
Physical and mental wellness programs, competitive vacation and holidays, and paid parental and adoption leave.
Professional development opportunities, employee networks, geographic groups, and volunteer opportunities.
The role may require periodic alcohol and/or drug testing during employment.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →