Senior Security Engineer

2 days ago


Chicago IL United States Hudson Manpower Full time

We are looking for a hands-on WorkDay developer. This person will fully understand how the HCM modules work and will be able to customize workflows and finetune the system. They will be highly focused on Performance Management and Performance Metrics within Workday.

Job Description:

  1. Experience with industry standard Red Team testing tools (Cobalt Strike, Mythic C2, Rubeus, Bloodhound, Covenant, etc.); or the ability to demonstrate equivalent knowledge.
  2. Expert understanding of how an Advanced Persistent Threat could compromise a financial institution without using phishing.
  3. Expert understanding of Red Team concepts, tools, and automation strategies.
  4. Expert understanding of MITRE ATT&CK framework tactics, techniques, and procedures.
  5. Expert understanding of measuring and rating vulnerabilities based on principal characteristics of a vulnerability.
  6. Expert understanding of Windows and Linux system hardening concepts and techniques.
  7. Expert understanding of modifying payloads to bypass detections like EDR.
  8. Expert understanding of how to compromise a company without using phishing.
  9. Strong understanding with at least one scripting language (Python, Ruby, PowerShell, Bash, etc.).
  10. Experience with at least one cloud environment (AWS, GCP, Azure).
  11. Experience attacking cloud, on-prem, and/or hybrid environments from initial access all the way through actions on objective.
  12. Previous experience of Red Team project delivery to include creation and execution of statement of work, risk mitigation strategies, and working with stakeholders to remediate findings.
  13. Experience of using multi-operating system command and control tools.
  14. Experience developing custom attack tradecraft or modifying existing tools.
  15. Experience using automated configuration management such as Chef.
  16. Experience discovering and exploiting vulnerabilities in AI systems.
  17. Experience of conducting Offensive Security and/or Red Team exercises against macOS, iOS, or ChromeOS.
  18. Recognized industry certifications such as, but not limited to, GPEN, GXPN, GREM, eCPTX, eCPPT, OSCP, OSWE, CISSP, CPSA, CRT, etc.
  19. Knowledgeable in Industry Security standards (i.e.: TIBER-EU, CBEST, NIST Cyber Security Framework, ISO27002, etc.).
  20. Knowledgeable in Agile project management.

Responsibilities:

  1. This role will be responsible for participating in the execution of Red Team cyber exercises of internal and internet-facing information systems and infrastructure to identify misconfigurations and cyber security vulnerabilities that could be exploited by a threat actor to gain unauthorized access to computer systems and data.
  2. In addition, the role will require participation in Purple Team exercises to help the Blue Team improve their detection capabilities.
  3. This is a perfect opportunity for the right person to become a key part of a team of highly skilled cybersecurity professionals who execute a pivotal role in protecting and defending national critical infrastructure.
  4. Lead Red Team exercises against a hybrid environment using threat intelligence and the MITRE ATT&CK Framework.
  5. Participate in Purple Team exercises that are intelligence-driven to test cyber detections.
  6. Build and maintain Red and Purple team infrastructure, automating functions where possible.
  7. Continually research new offensive security tactics, techniques, and procedures and communicate knowledge of the same to other team members.
  8. Conduct ad-hoc offensive security testing using industry standard tools and/or internally developed tools.
  9. Lead report creation activities including compromise narratives and detailed technical findings with appropriate risk severity ratings, tactical and strategic recommendations to reduce risk levels, peer review of team's deliverables.
  10. Assist cyber defense teams during incident investigations providing subject matter expertise on attacker tradecraft and mindset.
  11. Interface with other information security departments, as well as other technology departments and business stakeholders to raise awareness of security issues and to provide knowledge sharing on remediation.
  12. Active contributor to Red and Purple Team activities for internal presentations and conferences.

Regards,

#J-18808-Ljbffr

  • Chicago, IL, United States Bank of America Full time

    Senior Security Engineer Location: Denver, Colorado; Washington, District of Columbia; Chicago, Illinois Job Description: The Senior Security Engineer is responsible for leading multiple security engineering efforts that deliver enterprise security capabilities. This will include serving as a subject matter expert of security technology and acting as the...


  • Chicago, United States Democorp Full time

    Overview: The Senior Security Engineer works in Optiv's 24x7x365 Security Operations Center as a member of the Managed Security Services team. The Senior Security Engineer uses technical knowledge on a number of security technologies to analyze and respond to security threats from various security platforms and technologies. The Senior Security Engineer...


  • Chicago, IL, United States Structured Communication Systems Inc Full time

    Architect complex Cisco solutions, lead technical discussions and demonstrations, and deploy secure projects for Structured’s customers. Structured Communication Systems is a leading information technology consultancy and systems integrator. We are experts at architecting and implementing secure and reliable solutions for delivering business applications,...


  • Cordova, IL, United States Constellation Energy Full time

    WHO WE ARE As the nation's largest producer of clean, carbon-free energy, Constellation is focused on our purpose: accelerating the transition to a carbon-free future. We have been the leader in clean energy production for more than a decade, and we are cultivating a workplace where our employees can grow, thrive, and contribute. Our culture and employee...


  • Chicago, IL, United States CTC Innovations, LLC Full time

    As a Senior Information Security Operations Engineer, you will have the opportunity to contribute to the success of the Information Security operations team, Information Security program, and the firm. Innovate and improve security posture and architecture by working with the Information Security team and more broadly and collaboratively across all CTC teams...

  • Sales Engineer

    2 days ago


    Chicago, IL, United States Keeper Security, Inc. Full time

    Keeper Security is hiring an experienced Sales Engineer to join our B2B sales team. This is a 100% remote position with an opportunity to work a hybrid schedule for candidates who live near our global headquarters in Chicago. Keeper’s cybersecurity software is trusted by millions of people and thousands of organizations, globally. Keeper is published in 21...


  • Chicago, IL, United States Grubhub Full time

    Grubhub is seeking a seasoned Staff-level Software Engineer to design, develop, and maintain security infrastructure and tools to protect the company's platform and data. Grubhub is in growth-mode and we need standardized processes and tools that can be scaled across the organization, to ensure that security measures keep up with the pace of the business....


  • Chicago, IL, United States Alight Solutions Full time

    This role supports services provided to the federal government or federal government contractor and therefore requires US Citizenship. Proof of citizenship status will be required at time of hire. Alight Solutions is hiring a Senior Security Engineer with broad experience in the Cybersecurity Services portfolio to serve as a security champion within our...


  • Chicago, IL, United States Keeper Security, Inc. Full time

    Keeper is hiring a driven Systems Support Engineer to join our B2B support team. This can be a 100% remote position from select locations with an opportunity to work a hybrid schedule for candidates based in the Chicago, IL metro area. Keeper's cybersecurity software is trusted by millions of people and thousands of organizations globally. Join one of the...


  • Chicago, IL, United States Keeper Security, Inc. Full time

    Keeper is hiring a driven Systems Support Engineer to join our B2B support team. This can be a 100% remote position from select locations with an opportunity to work a hybrid schedule for candidates based in the Chicago, IL metro area. Keeper's cybersecurity software is trusted by millions of people and thousands of organizations, globally. Keeper is...


  • Denver, CO, United States Bank of America Full time

    Senior Security Engineer Denver, Colorado; Washington, District of Columbia; Chicago, Illinois Job Description: The Senior Security Engineer is responsible for leading multiple security engineering efforts that deliver enterprise security capabilities. This will include serving as a subject matter expert of security technology and acting as the critical...


  • Chicago, United States MDS (Micro-Data Systems) Full time

    *****NO C2C OR THIRD PARTY INQUIRIES*****Senior Security EngineerLocation: Chicago, IL Hybrid - Onsite 3 days per weekTop skills/tools, etc. that are MUST haves:Panorama/NGFW ExpertStrong Network SkillsCheckpoint Migration ExperienceNice to haves: XSOAR ExperienceZero Trust Experience (AppID, UserID, DeviceID, ContentID)Azure / AWS ExperienceVM SeriesJob...


  • chicago, United States MDS (Micro-Data Systems) Full time

    *****NO C2C OR THIRD PARTY INQUIRIES*****Senior Security EngineerLocation: Chicago, IL Hybrid - Onsite 3 days per weekTop skills/tools, etc. that are MUST haves:Panorama/NGFW ExpertStrong Network SkillsCheckpoint Migration ExperienceNice to haves: XSOAR ExperienceZero Trust Experience (AppID, UserID, DeviceID, ContentID)Azure / AWS ExperienceVM SeriesJob...


  • Trumbull, CT, United States Kyber Security Full time

    Kyber Security has been delivering full service technology solutions to businesses in the Northeastern US since 1985. We are laser focused on delivering enterprise grade cyber security solutions to the small to the medium sized business market “from a hacker’s point of view”. We have developed security solutions for SMBs which will protect their...


  • Chicago, United States Bank of America Full time

    Description : The Information Security Engineer will lead strategic security efforts to expand technology offerings within the Merchant and Small Business technology portfolio. This role will work across various security and technology teams to define, drive, and deliver major security components to meet program objectives. Knowledge and experience...


  • Leesburg, VA, United States Gray Tier Technologies Full time

    Gray Tier Technologies is seeking a Senior Cyber Security Engineer to join our growing team in support of Security Operations Center on a newly awarded contract. The ideal candidate will have experience working in a network security environment, such as a Security Operations Center (SOC), Computer Emergency Response Team (CERT), Computer Incident Response...


  • Denver, CO, United States Dice Full time

    Senior Security Engineer (Mobile Security) Posted 60+ days ago | Updated 2 hours ago Overview On Site Depends on Experience Full Time Skills Software security, Testing, Geographic information system, Research, Auditing, Agile The Information Security Engineer will lead strategic security efforts to expand technology offerings within the Merchant and Small...


  • Sunnyvale, CA, United States CoreWeave Full time

    CoreWeave is looking for a curious and creative Security Engineer to join our Infrastructure Security team. The InfraSec team is responsible for the security posture and security tooling around our core Kubernetes infrastructure and provides security-focused solutions to the larger engineering organization. As a Senior Security Engineer, you will be...


  • Amityville, NY, United States NAPCO Security Technologies Full time

    Position: Senior Engineer – RF Electrical Engineer Company: NAPCO Security Technologies, Inc.Location: Amityville, NYCompany: NAPCO Security Technologies, a world-wide leader in the manufacturing of electronic security systems for over 40 years, headquartered in Amityville, Long Island NY, seeks a Sr. RF Design Engineer to join our Engineering team. This...

  • Senior Security

    3 days ago


    Chicago, IL, United States Zero Hash Full time

    About the Role: Zero Hash seeks an experienced and passionate IT/Security Leader to join our team. In this role, your passion for IT/Security engineering and operations will be used to continue to improve the process and operational capabilities of security for our infrastructure and development, as well as collaborate across the organization. Reporting...