Red Team Principal Consultant

Job Description: - Lead a team performing Red Team activities simulating known threat actors

• Help customers determine the impact and likelihood of threat actors accomplishing objectives across the Kill Chain and MITRE ATT&CK Framework
• Coordinate with senior leadership and plan and oversee execution of assessments
• Assist CrowdStrike Services functions in improving customers’ security defenses
• Support, manage, and mentor less experienced Red Team members
• Act as the primary contact for coordination of Red Team activities
• Coordinate and lead penetration testing activities
• Develop reports and mitigation strategies for management and technical audiences
• Communicate effectively with executive leadership and technical support teams
• Organize resources for penetration assessments of operating systems, applications, databases, and network infrastructure components
• Work with the team to develop and improve information security programs and resources
• Provide guidance to operational teams during enterprise-wide crisis scenarios, including large-scale production service outages
• Work as an operator and project manager across various penetration testing offerings

Requirements: - Minimum 5 years of experience in Red Team/Penetration Testing activities is highly preferred

• Minimum 1 year of experience in a leadership role is highly preferred
• Security community participation (conference speaker, tool development contributor, …) is highly preferred
• Advanced experience with Security Assessment Toolsets (Metasploit, NMAP, Cobalt Strike, Nessus, Burp Suite, etc.)
• Comprehensive understanding of security methodologies, technologies, and best practices
• Experience with Windows, Linux, UNIX, and Mac operating systems
• Advanced experience with networking components, including routers, switches, load balancers, and wireless access points
• Comprehensive knowledge of firewalls, proxies, mail servers, and web servers
• Advanced experience with operational support for operating systems, applications, and networks
• Advanced experience with Red Teaming, vulnerability/penetration testing, and adversary emulation assessments
• Advanced experience in automation and scripting of applications and systems
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes
• Desirable certifications: OSCP, GPEN, OSCE, GCIH, GXPN
• Occasional travel may be required ( Benefits: - Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Eligibility for bonuses
• Equity grants
• Health insurance
• 401k
• Paid time off