Jr. Red Team Operator; Red Team - Hybrid

About Us

We’re the world’s leading provider of secure financial messaging services, headquartered in Belgium. We are the way the world moves value – across borders, through cities and overseas. No other organisation can address the scale, precision, pace and trust that this demands, and we’re proud to support the global economy.

We’re unique too. We were established to find a better way for the global financial community to move value – a reliable, safe and secure approach that the community can trust, completely. We’re always striving to be better and are constantly evolving in an ever-changing landscape, without undermining that trust. Five decades on, Swift now has a presence in 200+ countries and legal territories to serve a community of more than 12,000 banks and financial institutions.

Do you stay up late at night wondering how organizations actually get hacked in real life? Do you read about real world breaches and think to yourself, "If that would have been me, I would have done this instead"? If you answered yes to any of those questions, please continue!

We are seeking a Red Team Operator to join Swift's Red Team to plan and execute intelligence driven Red Team operations to simulate criminal, nation state and insider threats. This role goes beyond using automated tools and following typical penetration testing checklists, instead we are seeking a candidate who understands how an attacker thinks and can translate this into repeatable, outcome focused, emulation campaigns designed to identify weaknesses early and improve existing defensive capabilities.

In this role you will:

• With assistance from senior team members, develop and execute exploitation scenarios against network, application, mobile, and wireless environments per scoped engagements
• Translate threat intelligence into realistic attack scenarios, mapping campaigns to specific threat actor groups
• Stay current on emerging offensive security techniques
• Continually evolve existing Tactics, Techniques and Procedures (TTPs) in use by the Red Team to match TTPs used by real world adversaries
• Conduct phishing and OSINT-driven social engineering campaigns
• Develop and refine payloads and attack paths across Swift infrastructure
• Link technical exploitation to risks associated with the business
• Conduct physical security assessments to include RF site surveys and attempts to circumvent physical security controls
• Share techniques, lessons learned, and tool improvements with peers
• Support Purple Teaming activities by working closely with the Security Operations Centre (SOC) to identify and help remediate detection gaps

We are seeking professionals with:

• Bachelor’s Degree in Computer Science, Cyber Security, or a related field
• 2 to 5 years of relevant work experience in Penetration Testing or Red Team operations
• Deep sense of belonging to and contributing to a team yet can operate independently when necessary, across phases of a campaign within different environments
• Ability to chain vulnerabilities to achieve privilege escalation and lateral movement
• Ability to document technical details clearly for senior review
• Strong knowledge of common technologies within an enterprise environment (e.g. Windows, Active Directory (AD), Linux, cloud environments, etc)
• Strong desire to continually learn and obtain new skills

• Offensive Security Certified Professional (OSCP) or higher Offsec certification
• Certified Red Team Operator (CRTO)
• SANS GXPN

Swift is unable to sponsor an employment authorization for this position now or in the future.

The estimated salary range for a new hire in this position in Virginia is $82,361.00 USD Annual MINIMUM to $ USD Annual MAXIMUM. Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. Our compensation packages include a competitive base salary and bonus opportunity for all employee’s contingent on personal and company performance. Our generous benefits program includes medical, dental, vision and life insurance with no premium costs for our employees and their families, and retirement plan plus matching 401k.