高级红队操作员 - 副总裁

Job Description
Purpose of the role
To assess and improve the security posture of the organisation by identifying, validating, and helping mitigate weaknesses across information technology (IT) systems, applications, networks, and infrastructure through authorised security testing, adversarial simulation, and threat-based assessment techniques.
Accountabilities

• Plan and deliver offensive security engagements, audits and threat models to identify vulnerabilities and adversary pathways across the bank’s systems, applications, networks, and infrastructure using offensive security tools and techniques; and communicating actionable findings, risk impact, and remediation recommendations to technical and business stakeholders.

• Collaborate with stakeholders and technology teams to identify emerging cyber-attack techniques, tools, and technologies, and to contribute to the continuous improvement of offensive security methodologies, frameworks, and testing approaches.

• Develop and maintain clear, comprehensive documentation and reports for senior stakeholders, detailing offensive security findings, risk impact, and remediation guidance.

• Collaborate with stakeholders to understand security requirements and existing controls across business processes, applications, and services, in order to enhance the organisation’s overall security posture and assurance.

• Identify emerging vulnerabilities, exploit techniques, and cyber-attack trends to inform the development of offensive security testing methodologies and assurance activities.

• Design and maintain offensive security tooling, infrastructure, and tradecraft, ensuring safe, and controlled operations aligned with legal, ethical, and organisational requirements.

• Support the management of complex cybersecurity incidents by collaborating with information technology (IT), security operations, and incident response teams, providing technical analysis, subject-matter expertise, and advisory input to assist effective investigation and remediation efforts. ​

Vice President Expectations

• To contribute or set strategy, drive requirements and make recommendations for change. Plan resources, budgets, and policies; manage and maintain policies/ processes; deliver continuous improvements and escalate breaches of policies/procedures..

• If managing a team, they define jobs and responsibilities, planning for the department’s future needs and operations, counselling employees on performance and contributing to employee pay decisions/changes. They may also lead a number of specialists to influence the operations of a department, in alignment with strategic as well as tactical priorities, while balancing short and long term goals and ensuring that budgets and schedules meet corporate requirements..

• If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L – Listen and be authentic, E – Energise and inspire, A – Align across the enterprise, D – Develop others..

• OR for an individual contributor, they will be a subject matter expert within own discipline and will guide technical direction. They will lead collaborative, multi-year assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will train, guide and coach less experienced specialists and provide information affecting long term profits, organisational risks and strategic decisions..

• Advise key stakeholders, including functional leadership teams and senior management on functional and cross functional areas of impact and alignment.

• Manage and mitigate risks through assessment, in support of the control and governance agenda.

• Demonstrate leadership and accountability for managing risk and strengthening controls in relation to the work your team does.

• Demonstrate comprehensive understanding of the organisation functions to contribute to achieving the goals of the business.

• Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategies.

• Create solutions based on sophisticated analytical thought comparing and selecting complex alternatives. In-depth analysis with interpretative thinking will be required to define problems and develop innovative solutions.

• Adopt and include the outcomes of extensive research in problem solving processes.

• Seek out, build and maintain trusting relationships and partnerships with internal and external stakeholders in order to accomplish key business objectives, using influencing and negotiating skills to achieve outcomes.

All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.
Embark on a transformative journey as a Senior Red Team Operator - VP. At Barclays, our vision is clear –to redefine the future of banking and help craft innovative solutions. In this role, you’ll leverage industry-leading tools, explore emerging techniques, and execute operations across a wide range of domains, including cyber, physical, human, process, and technology. As a member of the Red Team, you’ll participate in full-scope adversary emulation exercises spanning cyber operations, physical security assessments, social engineering engagements, and everything in between, testing the resilience of our defenses under realistic conditions. You’ll identify vulnerabilities and control gaps, then work closely with stakeholders to help strengthen our security posture. This is a highly hands-on role, ideal for someone who thrives on tackling complex challenges, developing offensive security capabilities, and operating against sophisticated targets. You’ll have dedicated time to research emerging tradecraft, evaluate new tools and techniques, and collaborate with a team of skilled, highly motivated operators. Success in this role requires strong technical expertise, practical security testing experience, creativity in problem-solving, and the ability to work effectively across teams to achieve meaningful security outcomes.
To be successful as a Senior Red Team Operator - VP, you should have experience:

• Develop and enhance custom tooling, offensive tradecraft, and defense-evasion techniques to emulate sophisticated threat actors and evaluate the effectiveness of security controls, detection, and response capabilities

• Research, prototype, and execute innovative attack methodologies that advance adversary emulation capabilities and align with the evolving threat landscape

• Demonstrate expertise in Red Team operations through hands-on security testing, offensive security research, and continuous development toward or attainment of industry-recognized certifications such as OSCP, OSEP, CRTO, CRTP, CREST, CCSAS, CCRTS, or equivalent

• Leverage programming and scripting skills to build, customize, and automate tools that improve operational efficiency and support complex Red Team engagements

• Apply strong analytical thinking, creativity, and problem-solving skills to navigate technical challenges, adapt to dynamic environments, and deliver impactful security testing outcomes

Other highly valued skills include:

• Developing and enhancing custom tooling, offensive tradecraft, and defense-evasion techniques to emulate sophisticated threat actors and evaluate the effectiveness of security controls, detection, and response capabilities

• Research, prototype, and execute innovative attack methodologies that advance adversary emulation capabilities and align with the evolving threat landscape

• Demonstrate expertise in Red Team operations through hands-on security testing, offensive security research, any of these industry-recognized certifications such as OSCP, OSEP, CRTO, CRTP, CREST, CCSAS, CCRTS, are a plus

• Leverage programming and scripting skills to build, customize, and automate tools that improve operational efficiency and support complex Red Team engagements

• Apply strong analytical thinking, creativity, and problem-solving skills to navigate technical challenges, adapt to dynamic environments, and deliver impactful security testing outcomes

You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking, digital and technology, as well as job-specific technical skills.
This role is a Work from Home (WFH) opportunity.
Minimum Salary: $175,000
Maximum Salary: $225,000
The minimum and maximum salary/rate information above include only base salary or base hourly rate. It does not include any other type of compensation or benefits that may be available.
Barclays employees are eligible for a suite of competitive and generous employee benefits, including medical, dental and vision coverage, 401(k), life insurance, and other paid leave for qualifying circumstances.
This position is eligible for an incentive award.
Originally posted on Himalayas