Senior Red Team Operator - Vice President

About the role

Barclays is recruiting a Senior Red Team Operator at Vice President level, based in New Jersey, USA, within its Chief Information Security Office. The role is a Work from Home opportunity and is permanent. Its purpose is to assess and improve the organisation's security posture by identifying, validating and helping to mitigate weaknesses across IT systems, applications, networks and infrastructure through authorised security testing, adversarial simulation and threat-based assessment.

Key responsibilities

• Plan and deliver offensive security engagements, audits and threat models to identify vulnerabilities and adversary pathways, and communicate findings, risk impact and remediation recommendations to technical and business stakeholders.
• Collaborate with stakeholders and technology teams to identify emerging attack techniques and tools, and to improve offensive security methodologies and testing approaches.
• Develop and maintain documentation and reports for senior stakeholders on findings, risk and remediation guidance.
• Identify emerging vulnerabilities, exploit techniques and attack trends to shape offensive security testing and assurance activities.
• Design and maintain offensive security tooling, infrastructure and tradecraft, keeping operations safe, controlled and compliant with legal, ethical and organisational requirements.
• Support complex cybersecurity incidents by working with IT, security operations and incident response teams, providing technical analysis and advice.
• As a Vice President, advise senior management on functional and cross-functional issues, manage risk and controls, and lead or guide multi-year assignments and specialist teams.

Required profile

• Experience developing and enhancing custom tooling, offensive tradecraft and defense-evasion techniques to emulate sophisticated threat actors and test security controls, detection and response.
• Hands-on Red Team experience, offensive security research and continuous development toward or attainment of industry-recognised certifications such as OSCP, OSEP, CRTO, CRTP, CREST, CCSAS or CCRTS (or equivalent).
• Ability to use programming and scripting to build, customise and automate tools for Red Team engagements.
• Analytical thinking, creativity and problem-solving skills, and the ability to work across teams.
• Legal right to work in the United States; the role may be subject to enhanced governance and additional regulatory and compliance obligations.

What we offer

• Base salary of $175,000 to $225,000, plus an incentive award.
• Medical, dental and vision coverage, 401(k), life insurance and other paid leave.
• Competitive holiday allowance, private medical care and pension contribution.
• Flexible working arrangements and hybrid working, discussed with the hiring manager.