Sr Security Engineer- Red team

4 weeks ago

Chicago, United States CME Group Full time
Role is located in Chicago office. Hybrid 2 days on site.

We are not able to support 100% remote work.

We are looking for a Sr Cyber Security Engineer - Red Team to be an integral part of our Offensive Security organization and contribute towards improving CME Group's security posture.

This role will be responsible for participating in the execution of Red Team cyber exercises of internal and internet facing information systems and infrastructure to identify misconfigurations and cyber security vulnerabilities that could be exploited by a threat actor to gain unauthorized access to computer systems and data. In addition, the role will require participation in Purple Team exercises to help the Blue Team improve their detection capabilities.
This is a perfect opportunity for the right person to become a key part of a team of highly skilled cybersecurity professionals who execute a pivotal role in protecting and defending national critical infrastructure.

Principal Responsibilities
  • Lead red team exercises against a hybrid environment using threat intelligence and the MITRE ATT&CK Framework.
  • Participate in purple team exercises that are intelligence driven to test cyber detections
  • Build and maintain Red and Purple team infrastructure, automating functions where possible.
  • Continually research new offensive security tactics, techniques, and procedures and communicate knowledge of the same to other team members.
  • Conduct ad-hoc offensive security testing using industry standard tools and/or internally developed tools.
  • Lead report creation activities including compromise narratives and detailed technical findings with appropriate risk severity ratings, tactical and strategic recommendations to reduce risk levels, peer review of team's deliverables.
  • Assist cyber defense teams during incident investigations providing subject matter expertise on attacker tradecraft and mindset.
  • Interface with other information security departments, as well as other technology departments and business stakeholders to raise awareness of security issues and to provide knowledge sharing on remediation.
  • Active contributor to Red and Purple Team activities for internal presentations and conferences
Position Requirements
  • Approx 8 years' experience with industry standard Red Team testing tools (Cobalt Strike, Mythic C2, Rubeus, Bloodhound, Covenant, etc.); or the ability to demonstrate equivalent knowledge.
  • Expert understanding of how an Advanced Persistent Threat could compromise a financial institution without using phishing.
  • Expert understanding of Red Team concepts, tools, and automation strategies.
  • Expert understanding of MITRE ATT&CK framework tactics, techniques, and procedures.
  • Expert understanding of measuring and rating vulnerabilities based on principal characteristics of a vulnerability.
  • Expert understanding of Windows and Linux system hardening concepts and techniques.
  • Expert understanding of modifying payloads to bypass detections like EDR.
  • Expert understanding of how to compromise a company without using phishing.
  • Strong understanding with at least one scripting language (Python, Ruby, PowerShell, Bash, etc.).
  • Experience with at least one cloud environment (AWS, GCP, Azure).
  • Experience attacking cloud, on-prem and/or hybrid environments from initial access all the way through actions on objective.
Nice to have
  • Previous experience of Red Team project delivery to include creation and execution of statement of work, risk mitigation strategies, and working with stakeholders to remediate findings.
  • Experience of using multi operating system command and control tools.
  • Experience developing custom attack tradecraft or modifying existing tools.
  • Experience using automated configuration management such as Chef.
  • Experience discovering and exploiting vulnerabilities in AI systems.
  • Experience of conducting Offensive Security and/or Red Team exercises against macOS, iOS, or ChromeOS.
  • Recognized industry certifications such as, but not limited to, GPEN, GXPN, GREM, eCPTX, eCPPT, OSCP, OSWE, CISSP, CPSA, CRT, etc.
  • Knowledgeable in Industry Security standards (i.e.: TIBER-EU, CBEST, NIST Cyber Security Framework, ISO27002, etc.).
  • Knowledgeable in Agile project management.

    #LI-Hybrid
    #LI-DS
    #dice


CME Group : Where Futures are Made

CME Group is the world's leading and most diverse derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career by shaping tomorrow. We invest in your success and you own it - all while working alongside a team of leading experts who inspire you in ways big and small. Problem solvers, difference makers, trailblazers. Those are our people. And we're looking for more.

  • Hybrid Sr Cyber Security Engineer

    2 months ago

    Chicago, United States Solving IT Full time

    Hybrid Senior Cyber Security Engineer (Red Team) - No C2C and No SponsorshipOne of the world’s most prominent derivatives marketplace is focused on seeking highly motivated individuals to help foster their corporate culture and uphold their core values with integrity. In this role, you will be working with the most advanced trading technology and...

  • Sr Security Engineer

    4 weeks ago

    Chicago, United States Solving IT Full time

    One of the world's most prominent derivatives marketplace is focused on seeking highly motivated individuals to help foster their corporate culture and uphold their core values with integrity. In this role, you will be working with the most advanced trading technology and industry-leading clearing and risk management capabilities. Come join their world-class...

  • Sr. Security Engineer

    1 month ago

    chicago, United States Informatic Technologies, Inc. Full time

    About the Company: A Leading Financial Service Client is looking to hire a strong Security Engineer who can lead Red team exercises against a hybrid environment using threat intelligence and the MITRE Telecommunication&CK Framework.Responsibilities: Approx 8 years' experience with industry standard Red Team testing tools (Cobalt Strike, Mythic C2, Rubeus,...

  • Sr. Security Engineer

    2 months ago

    chicago, United States Informatic Technologies, Inc. Full time

    About the Company: A Leading Financial Service Client is looking to hire a strong Security Engineer who can lead Red team exercises against a hybrid environment using threat intelligence and the MITRE Telecommunication&CK Framework.Responsibilities: Approx 8 years' experience with industry standard Red Team testing tools (Cobalt Strike, Mythic C2, Rubeus,...

  • Sr. Security Engineer

    2 months ago

    Chicago, United States Informatic Technologies, Inc. Full time

    About the Company: A Leading Financial Service Client is looking to hire a strong Security Engineer who can lead Red team exercises against a hybrid environment using threat intelligence and the MITRE Telecommunication&CK Framework.Responsibilities: Approx 8 years' experience with industry standard Red Team testing tools (Cobalt Strike, Mythic C2, Rubeus,...

  • Sr Security Engineer

    2 months ago

    Chicago, United States Informatic Technologies, Inc. Full time

    Principal ResponsibilitiesLead red team exercises against a hybrid environment using threat intelligence and the MITRE Telecommunication &CK Framework.Participate in purple team exercises that are intelligence driven to test cyber detectionsBuild and maintain Red and Purple team infrastructure, automating functions where possible.Continually research new...

  • Sr Security Engineer

    1 month ago

    chicago, United States Informatic Technologies, Inc. Full time

    Principal ResponsibilitiesLead red team exercises against a hybrid environment using threat intelligence and the MITRE Telecommunication &CK Framework.Participate in purple team exercises that are intelligence driven to test cyber detectionsBuild and maintain Red and Purple team infrastructure, automating functions where possible.Continually research new...

  • Sr Security Engineer

    2 months ago

    chicago, United States Informatic Technologies, Inc. Full time

    Principal ResponsibilitiesLead red team exercises against a hybrid environment using threat intelligence and the MITRE Telecommunication &CK Framework.Participate in purple team exercises that are intelligence driven to test cyber detectionsBuild and maintain Red and Purple team infrastructure, automating functions where possible.Continually research new...

  • Sr Linux Engineer

    3 months ago

    Chicago, United States Aloden, Inc. Full time

    Sr. Linux Engineer Location: Chicago, Illinois (Hybrid) Candidate Preference: Local to Chicago or within commuting distance. Work Authorization: W2 Candidates Only Responsibilities: Administer and maintain Red Hat Enterprise Linux (RHEL) systems (versions 7, 8, and 9) in an enterprise environment. Automate routine tasks using tools like Ansible or...

  • Sr Redhat

    2 weeks ago

    chicago, United States Prairie Consulting Services Full time

    Location: Chicago – HybridIndustry: Banking / Financial ServicesJoin one of the leading global financial institutions, where innovation meets security and technology empowers millions. We are looking for a skilled Senior Red Hat / LDAP Engineer to join our dynamic IT infrastructure team and help drive the bank’s mission to provide cutting-edge solutions...

  • Sr Redhat

    2 weeks ago

    Chicago, United States Prairie Consulting Services Full time

    Location: Chicago – HybridIndustry: Banking / Financial ServicesJoin one of the leading global financial institutions, where innovation meets security and technology empowers millions. We are looking for a skilled Senior Red Hat / LDAP Engineer to join our dynamic IT infrastructure team and help drive the bank’s mission to provide cutting-edge solutions...

  • Sr Network Security Engineer

    4 hours ago

    Chicago, United States Metra Full time

    Date Posted: 11/25/2024 Posting End Date: 12/8/2024 Location: 98-Non-Contract City: Chicago State: IL Country: United States of America Category: Professionals FLSA Status: Exempt Salary Mid Point: $116,551.00 Salary Range: $93,240.00 - $139,861.00Description The final salary will depend on the candidate's qualifications. Those with 8...

  • Sr. Systems Engineer I

    1 week ago

    CHICAGO, United States Exelon Full time

    Who We Are: We're powering a cleaner, brighter future.Exelon is leading the energy transformation, and we're calling all problem solvers, innovators, community builders and change makers. Work with us to deliver solutions that make our diverse cities and communities stronger, healthier and more resilient.We're powered by purpose-driven people like you who...

  • Sr. Security IAM Architect

    6 days ago

    Chicago, United States Rush University Full time

    Job Description Location: Chicago, IL Hospital: RUSH University Medical Center Department: Cybersecurity Operations Work Type: Full Time (Total FTE between 0.9 and 1.0) Shift: Shift 1 Work Schedule: 8 Hr (8:00:00 AM - 5:00:00 PM) Summary: The Senior Identity and Access Management (IAM) Architect will be responsible for defining and architecting Rush...

  • Sr Electrical Engineer

    2 months ago

    Chicago, United States Entegee Full time

    Job DescriptionJob DescriptionSummary: Seeking a Sr Electrical Engineer with expertise in Revit and commercial construction/building design for comprehensive project assessments and commissions.Requirements:BSEE or similar degree8-10+ years of experiencePE in ILProficiency in RevitPreferred Skills:Experience with building/construction design (Commercial,...

  • Senior Security Software Engineer

    3 weeks ago

    Chicago, United States OpenGov Full time

    OpenGov is home to an exceptional team - passionate about our mission to power more effective and accountable government. By bringing the OpenGov Cloud to our nation‘s state and local government, we‘re transforming communities so they can thrive! Imagine yourself being able to help small business owners open their doors faster, ensuring our tax dollars...

  • Sr. Software Engineer

    4 weeks ago

    Chicago, United States DTI Full time

    WHO WE ARE: Founded in 2007, DTI (Diversified Technology, Inc.) is a successful African American owned IT Consulting/Staffing firm based in Chicago's Loop. WHAT WE DO: We focus on providing delivery, staffing, and supported services such as enterprise integration/implementations including, but not limited to, CRM, EAM, ERP, PMO, and QA. We service clients in...

  • Sr. Manager of DevOps Engineering

    6 days ago

    Chicago, United States Jobot Full time

    Job DescriptionJob DescriptionCome join a growing FinTech Company!This Jobot Job is hosted by: Chris GormanAre you a fit? Easy Apply now by clicking the "Apply Now" buttonand sending us your resume.Salary: $175,000 - $190,000 per yearA bit about us:We are a FinTech organization focused on creating a next-gen platform designed to fuel giving at scale. For...

  • Sr. Security IAM Architect

    4 weeks ago

    Chicago, Illinois, United States Rush University Full time

    Job DescriptionLocation: Chicago, ILHospital: RUSH University Medical CenterDepartment: Cybersecurity OperationsWork Type: Full Time (Total FTE between 0.9 and 1.0)Shift: Shift 1Work Schedule: 8 Hr (8:00:00 AM - 5:00:00 PM)Summary:The Senior Identity and Access Management (IAM) Architect will be responsible for defining and architecting Rush University...

  • Security Engineer

    2 weeks ago

    Chicago, United States OpenGov Full time

    OpenGov is home to an exceptional team - passionate about our mission to power more effective and accountable government. By bringing the OpenGov Cloud to our nation‘s state and local government, we‘re transforming communities so they can thrive! Imagine yourself being able to help small business owners open their doors faster, ensuring our tax dollars...