# of Positions :
Minimum Education Level :
Experience Required :
Full Time Regular
Hours per week:
Our Cyber Security and Technology Risk (CSTR) team is looking for a Manager - Offensive Security Operations with a proven track record in conducting network exploitation operations who can develop and execute attack plans to meet the specified objectives and who can effectively communicate mission debriefs to enhance the security of our products and organization.
Plan, lead and execute offensive (red team/penetration testing) operations where you assume the role of the adversary during tests, training and exercises
Employ simulated adversary threat based approaches to expose and exploit vulnerabilities and weaknesses to improve the security of both our products and the organization
Replicate tactics and techniques used by modern attackers, common network exploitation and penetration techniques as well as common software exploitation techniques
Develop attack plans to meet the specified objectives and coordinate with other Red Team Operators to achieve these goals
Provide constructive feedback to the defenders and product teams on their successes and failures
Develop and implement tools that assist with execution of security assessments, including custom tools and automation
Establish credibility as a trusted advisor to stakeholders including customers, executives, peers, and employees
Stay current with advanced attacks and apply them during red team activities
Help defensive teams and product teams understand how to detect and/or stop cyber-attacks via purple teaming exercises, CTF demonstrations, etc.
Proactively lead the practice by setting the strategy for the team
Become part of a team of security enthusiasts that perform cutting-edge research and promote an environment of innovation and knowledge-sharing
Develop and maintain metrics demonstrating our offensive security engagements and remediation tracking
Bachelor's Degree in Information Systems / Technology, Computer Science / Engineering or equivalent field of study or a minimum of 5 years of cyber security experience
Proven experience in Red Teaming and Penetration Testing
Minimum 3 years of deep, hands-on, technical security experience with at least one of: multiple security technologies such as Firewalls, IDS/IPS, Web Proxies and DLP among others, Web Applications and Services, Cryptography, Social Engineering and Open Source Intelligence Gathering (OSINT), Mobile platforms, Software Security, malware reverse engineering
Minimum 1 year of experience developing exploit code or novel attacks
Infrastructure and application level penetration testing experience
Strong understanding of enterprise operating system environments and networking
Strong understanding of security vulnerabilities and common software engineering flaws
Knowledge of attacker lifecycles and defender strategies
Strong verbal & written communication skills
3+ years of experience in scripting
Proficiency in PowerShell, Python, C, C#, Go or other language to build and extend toolsets
Familiarity with CND-based analytical models (Kill Chain, ATT&CK, etc.)
As a global business, Refinitiv relies on diversity of culture and thought to deliver on our goals. Therefore we seek talented, qualified employees in all our operations around the world-regardless of race, color, sex/gender, including p regnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under country or local law. Refinitiv is proud to be an Equal Employment Opportunity/Affirmative Action Employer providing a drug-free workplace.
Intrigued by a challenge as large and fascinating as the world itself? Come join us.
Hoboken-New Jersey-United States of America
As a global business, we rely on diversity of culture and thought to deliver on our goals. Therefore we seek talented, qualified employees in all our operations around the world-regardless of race, color, sex/gender, including p regnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under country or local law. Refinitiv is proud to be an Equal Employment Opportunity/Affirmative Action Employer providing a drug-free workplace.
The Financial and Risk Business of Thomson Reuters is now Refinitiv. Refinitiv equips the financial community with access to an open platform that uncovers opportunity and catalyzes change. With a dynamic combination of data, insights, technology, and news from Reuters, our customers can access solutions for every challenge, including a breadth of applications, tools, and content—all supported by human expertise. At Refinitiv, we facilitate the connections that propel people and organizations to find new possibilities to move forward.
3 Times Square
New York, NY 10036
Job Posting Entered On :
Job Posting Expires On :