Principal / Senior Red Team Services Consultant (Remote, UAE/KSA)
作为网络安全的全球领导者,CrowdStrike 保护了推动现代组织的人类,流程和技术。自2011年以来,我们的使命没有改变。我们在这里阻止泄露行为,并重新定义了现代安全与世界上最先进的 AI 原生平台。我们在大型分布式系统上工作,每天处理近3万亿事件,这一流量日益增长。我们的客户跨越各行业,他们依赖 CrowdStrike 保持他们的业务运作,社区安全和生活前进。我们为一个以人工智能驱动任务为基础的公司做出贡献感到骄傲。众筹者通过灵活性和自主化推动他们的职业生涯,同时也被期望为负责任的人工智能采用,实验和创新文化做出贡献。我们使用人工智能第一思维方式作为一个力量乘法来积极地不断加快执行,建立专业知识,发现见解并解决复杂的问题。我们总是希望将有才华的人员加入团队,他们拥有无限的热情,对创新不重关注以及对客户,社区和彼此的狂热承诺。准备参加重要任务吗?网络安全的未来从你开始。关于角色:高级顾问将领导一个专门执行模拟已知威胁行为者的红团活动的团队,以帮助 CrowdStrike 客户确定杀戮链和 MITRE ATT&CK 框架中实现目标的影响和可能性。高级红团队顾问预计能够与高级领导协调,计划和监督评估的执行,并协助其他 CrowdStrike 服务功能来改善客户安全防御。该人员应该能够支持,管理和指导不具经验的红团队成员。你会做什么:· 作为红团活动协调的主要联系人,以及协调和领导所有透测试活动。· 为管理层和技术群体制定报告,包括缓解红团活动结果的战略。· 在 CrowdStrike 内部必须能够在各级 (执行领导和技术支持团队)上有效沟通。·组织资源来对操作系统,应用程序,数据库和网络基础设施组件进行透评估,以检测和编译威胁。·
查看英文原文
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.
About The Role:
The Senior Consultant will lead a team dedicated to performing Red Team activities simulating known threat actor, to help CrowdStrike customers determine the impact and likelihood of threat actor to accomplish objective across the Kill Chain and MITRE ATT&CK Framework. The Senior Red Team Consultant is expected to be able to coordinate with senior leadership, plan, and oversee execution of assessments and assist the other CrowdStrike Services’ functions to help improve customers security defense. This person should be capable of supporting, managing, and mentoring less experienced red team members.
What You'll Do:
- Act as a primary contact for coordination of Red Team activities as well as coordinating and leading all penetration testing activities.
- Develop reporting including mitigations strategies of results of Red Team activities for both management and technical audiences.
- Must be able to effectively communicate at all levels (executive leadership and technical support teams) within CrowdStrike.
- Organize resources to perform penetration assessments of operating systems, applications, databases and network infrastructure components to detect, enumerate threats.
- Work with a diverse team and lead/assist in developing and improving an information security program and information security resources.
- Provide guidance using specialized knowledge and toolsets to operational teams during enterprise wide crisis scenarios, e.g. large-scale production service outages, outside of the routine change management process.
- Must be able to work as an operator and project manager on various types of penetration testing offerings.
What You'll Need:
- Minimum 5 years of experience in a Red Team/Penetration Testing activities is highly preferred
- Minimum 1 year of experience in a Leadership role is highly preferred
- Security community participation (conference speaker, tool development contributor, …) is highly preferred
- Advanced experience with Security Assessment Toolsets (Metasploit, NMAP, Cobalt Strike, Nessus, Burp Suite, etc.)
- Comprehensive understanding of the security methodologies, technologies, and best practices
- Windows / Linux / UNIX / Mac operating systems
- Advanced experience with Networking components (routers, switches, load balancers, wireless access points, etc.)
- Comprehensive knowledge of firewalls, proxies, mail servers and web servers
- Advanced experience with operational support for operating systems, applications and networks
- Advanced experience with Red Teaming (vulnerability/penetration testing/adversary emulation assessments)
- Advanced experience in automation and scripting of applications and systems
- Desirable Certifications: OSCP, GPEN, OSCE, GCIH, GXPN
- Occasional travel may be required (<25%)
- Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
Benefits of Working at CrowdStrike:
- Market leader in compensation and equity awards
- Comprehensive physical and mental wellness programs
- Competitive vacation and holidays for recharge
- Paid parental and adoption leaves
- Professional development opportunities for all employees regardless of level or role
- Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
- Vibrant office culture with world class amenities
- Great Place to Work Certified™ across the globe
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.
If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at for further assistance.
Originally posted on Himalayas