Red Team Manager; Remote

USA - Remote

Full time

R30162

The Red Team Manager will work with a team of cyber security ninjas to perform red team activities simulating known threat actors, to help Crowd Strike customers train to detect adversaries and stop breaches. This person is expected to be able to coordinate with senior leadership, plan, and oversee execution of assessments and assist the other Crowd Strike Services’ functions to help improve customers' security defense.

We need someone capable of supporting, managing, and mentoring less experienced red team members.

• Lead the design, implementation, and delivery of Red Team offerings, including engagement work, reporting, and metrics.
• Overseeing the day-to-day operations of the Red Team.
• Act as a primary contact for coordination of Red Team activities as well as coordinating and leading all penetration testing activities.
• Responsible for developing and maintaining strong relationships with 3rd party vendors supporting Red Team engagements.
• Develop reporting including mitigations strategies of results of Red Team activities for both management and technical audiences.
• Must be able to effectively communicate at all levels (executive leadership and technical support teams) within Crowd Strike.
• Create and maintain operations, management, and ad hoc reports to monitor the performance of the Red Team.
• Organize resources to perform penetration assessments of operating systems, applications, databases and network infrastructure components to detect, enumerate threats.
• Lead/assist in developing and improving an information security program and information security resources.
• Provide guidance using specialized knowledge and toolsets to operational teams during enterprise wide crisis scenarios, e.g. large-scale production service outages, outside of the routine change management process.
• Work with a Sales team to scope new customer engagements.
• Must be able to work as an operator and project manager on various types of red team operations.

• Minimum 5 years of experience in a Red Team/Penetration Testing activities is highly preferred
• Minimum 3 years of experience in a Leadership role is highly preferred
• Experience with managing a tool development life cycle and development team
• Security community participation (conference speaker, tool development contributor, …) is highly preferred
• Advanced experience with Security Assessment Toolsets (Metasploit, NMAP, Cobalt Strike, Nessus, Burp Suite, etc.)
• Comprehensive understanding of the security methodologies, technologies, and best practices
• Windows / Linux / UNIX / Mac operating systems
• Advanced experience with Networking components (routers, switches, load balancers, wireless access points, etc.)
• Comprehensive knowledge of firewalls, proxies, mail servers and web servers
• Advanced experience with operational support for operating systems, applications and networks
• Advanced experience with vulnerability/penetration testing/adversary emulation assessments
• Advanced experience in automation and scripting of applications and systems
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
• Desirable
  
  Certifications:
  
  OSCP, GPEN, OSCE, GCIH, GXPN
• Occasional travel may be required (