About the job
UHG is seeking a solid information security professional to join our red team. This role will design and deliver realistic adversarial cyberattacks that will not only test the effectiveness of the security stack but will improve the company's ability to detect and respond to these types of attacks.
Responsibilities
Participate in the planning, design and implementation of assessments and plans
Perform full scope adversarial simulation/red team assessments
Work with the Blue Team in order to develop new and improved ways to defend the organization
Prepare reports containing attack paths, findings/vulnerability information, and mitigation options and recommendations
Present findings to various stakeholders, including the most senior leadership of the company
Provide support during ongoing assessments by writing tools and setting up infrastructure
Creating automation for specific tasks and operations
Research, investigate and evaluate emerging technologies, industry trends and best practices, and vendor solutions to be able to recommend and assess various security products
Qualifications
Minimum
High School Diploma/GED (or higher)
One or more relevant information security certification(s) such as OSCP, OSCE, GPEN, GXPN, etc
2+ years of experience in information security or Cyber Security
1+ years of hands-on work experience conducting offensive security operations
1+ years of experience with scripting, editing existing code, and general programming concepts using one or more of the following: PowerShell, JavaScript, Perl, Python, VB, bash, C/C++, C#, or Java
Intermediate level of knowledge with security testing standards or frameworks, such as the MITRE ATLAS Framework
Intermediate level of knowledge with implementing cyber adversarial TTPs
Intermediate level of experience with AI Security and AI Red Team testing methods
Preferred
Experience in other IT functions - system administration, software development, SOC, forensics, hunting, networking, etc
Experience with using, administering, and troubleshooting major operating systems (Windows, Linux/UNIX)
Experience in testing and assessing cloud environments
Experience with blue team tools and methods