Senior Red Teamer, Google Public Sector

Minimum qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• 10 years of Cyber Security experience (eg. Security Analyst, Security Consultant, Incident Response, Pen Testing, etc.).
• 5 years of experience on the keyboard during multiple Red Team engagements.
• Eligibility to obtain Public Trust Clearance.

Preferred qualifications:

• Experience with Exploit Development in Operating System environments.
• Experience in Social Engineering and related Psychology disciplines.
• Experience in Wireless and Radio Frequency technologies (Bluetooth, 802.11, etc.).
• Knowledge of Cloud Technologies and Web Application Technologies.
• Knowledge of OPSEC-focused Infrastructure Implementation (Docker, Redirectors, Mail Servers) and Active Directory and authentication-type technologies (Okta, SAML, ADFS Federation, etc.).
• Excellent skills in Reverse Engineering malware, data obfuscation, or encryption.

About the job

As a Senior Red Team Operator you will act as a executive member of a Red Team by conducting advanced adversary emulation operations against real-world targets, in varying environments, and against active network defenders. You will lead a team through the design, development, and decision making in the execution of red team operations. You will conduct root cause analysis of vulnerabilities, and ensure that operations complete objectives within the designated timeline. You will communicate the status to leadership on a regular basis and articulate findings in both spoken and written formats to customers, providing remediation recommendations based on discovered vulnerabilities. You will also ensure the post operations technical report and support activities are completed.

You will improve team tradecraft, techniques, procedures, infrastructure, and tooling. Other duties include tabletop exercises, Purple Teaming, analyzing threat and vulnerability reports, and the development and delivery of training related to adversaries and new technologies. You will also provide support and mentorship to other Red Team operators.

Google Public Sector brings the magic of Google to the mission of government and education with solutions purpose-built for enterprises. We focus on helping United States public sector institutions accelerate their digital transformations, and we continue to make significant investments and grow our team to meet the complex needs of local, state and federal government and educational institutions.

The US base salary range for this full-time position is $130,000-$193,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Lead, develop, and plan Red Team engagements using broad technical knowledge and subject matter expertise in relation to adversarial threats.
• Develop scenarios and artifacts that mimic real-world adversary groups for simulated testing.
• Chain vulnerabilities together and move laterally through an environment without detection.
• Develop comprehensive technical reports and presentations for customers.
• Conduct independent vulnerability research to discover new vulnerabilities and create training materials and opportunities to communicate technical topics to technicians and management.