Lead Engineer - Red Team
About The Position
Target's Cyber Fusion Center is the heart of its security team, combining learning, engineering, research, and operational work. The Red Team uses adversary simulation to uncover organizational risk, train defenders, and measure the processes and technology protecting the organization. Its work includes objective-driven operations, Purple Team collaboration, direct training and development, and consulting on security risk. The Lead Engineer - Red Team is a senior individual-contributor operator role, not a management role. The role conducts and leads adversary emulation operations, contributes to team direction, collaborates with partner teams, and mentors more junior operators. The position develops strategic objectives and operational plans, executes engagements, communicates findings, improves tools and procedures, and applies research into threat actor behavior to operational work. The position may be considered for Remote or Hybrid (internally called “Flex for Your Day”) work arrangements, based on Target's needs. Remote team members work full-time from home or another non-Target location, have no desk at a Target location, and may travel to headquarters up to four times a year. Hybrid team members may work remotely or onsite at a Target location depending on the role, team, and tasks. Work duties cannot be performed outside the country of the primary work location unless otherwise prescribed by Target.
Requirements
- Four years minimum experience in offensive security and/or defensive security.
- Strong offensive security knowledge.
- Strong understanding of the impact of Red Team work on an organization and its customers.
- Prioritizes process improvement.
- Seeks cross-functional collaboration opportunities.
- Communicates technical issues clearly and respectfully in a training or mentorship setting.
- Resolves complex technical issues with minimal assistance.
- Builds strong team commitment to support appropriate priorities.
- Keeps current on relevant technologies through self-directed learning.
Nice To Haves
- Deep Red Team adversary emulation experience.
- Experience working on or with Blue Teams, including Incident Response or Detection.
- Experience working in large, complex organizations.
- Python, C#, Rust, Go, or C skills.
- Ability to solve difficult problems and creatively subvert systems.
- Ability to replicate tools and techniques used by in-the-wild threat actors.
- Keeps up with threat actor trends impacting organizational security.
Responsibilities
- Consult on, design, and execute adversary emulation operations.
- Develop strategic adversary emulation objectives and operational plans.
- Execute adversary emulation operations to surface organizational risk.
- Research real-world threat actor tactics, techniques, and procedures and develop proof-of-concept tools and playbooks.
- Bypass preventative and detective security controls to accomplish operational goals.
- Partner with the Cyber Security Incident Response Team and other stakeholders to identify improvement opportunities.
- Collaborate with Cyber Threat Intelligence, Detection, and Threat Hunting engineers and analysts on research.
- Work with non-security engineering teams to educate and collaborate on operational objectives.
- Plan cooperative engagements with partner teams.
- Lead and train operators, including mentoring more junior operators.
- Communicate effectively with and directly support defenders.
- Present findings and operational work clearly and professionally to groups.
- Study threat actor techniques and apply that perspective to operational work.
- Partner with team members to improve tools and procedures.
- Manage work effectively using the team's project management tools, including Github and JIRA.
- Respond to changing team needs and priorities.
- Read and write code to accomplish red team goals.
- Develop a deep understanding of red team infrastructure.
Benefits
- Eligible team members and their dependents may receive comprehensive health benefits and programs, which may include medical, vision, dental, life insurance, and more.
- 401(k)
- Employee discount
- Short-term disability
- Long-term disability
- Paid sick leave
- Paid national holidays
- Paid vacation
- Financial, education, and well-being benefits
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
