Questa posizione non è più disponibile, ma ce ne sono altre Finanza e contabilità offerte di lavoro
Qatar Airways
Pubblicata
Chiusa
Technology Services Controller - Cyber Security (Offensive Security/Red team)
Cosa comprende il lavoro
About the role:
As Technology Services Controller Cyber Security (Offensive Security/Red team), you will be responsible for helping us achieve this ambition:
- Consult on, design, and execute adversary emulation operations
- Conduct research, develop, and apply offensive Tactics, Techniques and Procedures (TTP’s) in order to effectively mimic the capabilities of relevant threat actors and to develop proof-of-concept tools and playbooks
- Bypass preventative and detective security controls to accomplish operational goals
- Partner with the Cyber Security Incident Response Team and other stakeholders in the organization to identify improvement opportunities
- Collaborate with Cyber Threat Intelligence, Detection, and Threat Hunting engineers and analysts on research
- Work with non-security engineering teams to educate, and collaborate on operational objectives
- Continually test and improve technical infrastructure to support operations
- Apply applicable threat intelligence in order to mimic relevant threat actors Operate and deliver red team operations at clients;
- Innovate and keep developing the approach to align with relevant TTP's and trends;
About you:
- Must have a Bachelor’s Degree or equivalent certification
- Minimum 3 years of relevant experience in offensive security, defensive security, information technology infrastructure, and/or software development
- Demonstrates basic offensive security knowledge and seeks out cross-team collaboration opportunities
- Demonstrates a basic understanding of the impact of Red Team work on an organization and its customers
- Clearly and respectfully communicates technical issues in a training or mentorship setting
- Builds strong commitment within a team to support the appropriate priorities
- Stays current on relevant technologies with self-directed learning and should have a strong understanding of networking concepts, Windows, Linux and Mac operating systems vulnerabilities and exploitation
- Ability to code & develop tools in one or more programming languages and frameworks in one or more interpreted languages ( eg. Python, C#, Powershell, Golang, or C project development)
- Ability to analyze the tools and techniques of in-the-wild threat actors
- Understands Threat Actor trends impacting organizational security
- Security testing of cloud environments and should have worked on major public cloud providers (Azure, AWS, GCP etc.).
- Experience in offensive security tool development, customization or expansion.
- One or more of similar certifications (OSCP, OSCE, GPEN, GXPN, CRTO, CREST Certified Simulated Attack Manager).
- Dipartimento: Finanza e contabilità
Chiusa
Technology Services Controller - Cyber Security (Offensive Security/Red team)
A tempo completo, A tempo indeterminato
Data di inizio:
Ultima data di inizio: