Lead/Sr. Security Engineer - Red Team

Title: Lead/Sr. Security Engineer - Red Team

Location: Chicago, IL (Hybrid – 2 days in office per week)

Duration & Type: Initial 12-Month Contract with potential for extension

Compensation: Competitive hourly rate, Access to Healthcare, Vision and Dental Insurance Plan of Choice and 401K Plan

Summary

We are seeking a Lead/Sr. Security Engineer - Red Team for a high-profile client in the financial services industry. In this role, you’ll leverage industry-standard tools, the MITRE ATT&CK Framework, and your deep expertise in Red and Purple Team tactics to simulate real-world attacks and help our client stay ahead of evolving threats. If you have a passion for cybersecurity, a strong background in offensive security, and a desire to work at the forefront of cyber defense innovation, this is the perfect opportunity to make a lasting impact. Click apply now to join the Chamberlain experience!

What You Will Be Accountable For

• Lead red team exercises against a hybrid environment using threat intelligence and the MITRE ATT&CK Framework.
• Participate in purple team exercises that are intelligence driven to test cyber detections
• Build and maintain Red and Purple team infrastructure, automating functions where possible.
• Continually research new offensive security tactics, techniques, and procedures and communicate knowledge of the same to other team members.
• Conduct ad-hoc offensive security testing using industry standard tools and/or internally developed tools.
• Lead report creation activities including compromise narratives and detailed technical findings with appropriate risk severity ratings, tactical and strategic recommendations to reduce risk levels, peer review of team’s deliverables.
• Assist cyber defense teams during incident investigations providing subject matter expertise on attacker tradecraft and mindset.
• Interface with other information security departments, as well as other technology departments and business stakeholders to raise awareness of security issues and to provide knowledge sharing on remediation.
• Active contributor to Red and Purple Team activities for internal presentations and conferences
  
  

What Qualifications You Need:

• Bachelor's or Master's degree in Cybersecurity, Information Assurance, or similar field.
• Approx 8 years’ experience with industry standard Red Team testing tools (Cobalt Strike, Mythic C2, Rubeus, Bloodhound, Covenant, etc.); or the ability to demonstrate equivalent knowledge.
• Expert understanding of how an Advanced Persistent Threat could compromise a financial institution without using phishing.
• Expert understanding of Red Team concepts, tools, and automation strategies.
• Expert understanding of MITRE ATT&CK framework tactics, techniques, and procedures.
• Expert understanding of measuring and rating vulnerabilities based on principal characteristics of a vulnerability.
• Expert understanding of Windows and Linux system hardening concepts and techniques.
• Expert understanding of modifying payloads to bypass detections like EDR.
• Expert understanding of how to compromise a company without using phishing.
• Strong understanding with at least one scripting language (Python, Ruby, PowerShell, Bash, etc.).
• Experience with at least one cloud environment (AWS, GCP, Azure).
• Experience attacking cloud, on-prem and/or hybrid environments from initial access all the way through actions on objective.
  
  

Qualifications that will set you apart:

• Previous experience of Red Team project delivery to include creation and execution of statement of work, risk mitigation strategies, and working with stakeholders to remediate findings.
• Experience of using multi operating system command and control tools.
• Experience developing custom attack tradecraft or modifying existing tools.
• Experience using automated configuration management such as Chef.
• Experience discovering and exploiting vulnerabilities in AI systems.
• Experience of conducting Offensive Security and/or Red Team exercises against macOS, iOS, or ChromeOS.
• Recognized industry certifications such as, but not limited to, GPEN, GXPN, GREM, eCPTX, eCPPT, OSCP, OSWE, CISSP, CPSA, CRT, etc.
• Knowledgeable in Industry Security standards (i.e.: TIBER-EU, CBEST, NIST Cyber Security Framework, ISO27002, etc.).
• Knowledgeable in Agile project management.
  
  

About the Client:

Mixing powerful thinking and cutting-edge technology, our client is where the world comes to manage risk. Offering the widest range of global benchmark products across all major asset classes. They have created a marketplace for buyers and sellers bringing together individuals, companies, and institutions that need to manage risk. Our client works to serve as the counterparty to every trade that happens in our markets, to protect the integrity of our markets, and to virtually eliminate third-party credit risk. They are more than a marketplace, they are a team of groundbreakers, problem solvers, and difference makers.

Why Work with Chamberlain?

Chamberlain Advisors is a veteran-owned business that provides human capital solutions across a wide range of industries and engagement types. Chamberlain candidates benefit from our unique hiring and interviewing process which has been designed to increase the likelihood that they will be successful in their job searches. This is achieved through our 5-step recruitment process, ensuring a top-of-the-line candidate experience. Find out what makes us different; apply to Chamberlain today.

Equal Opportunity Employer

Chamberlain Advisors provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, Chamberlain Advisors complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Chamberlain Advisors expressly prohibits any form of workplace harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of Chamberlain Advisors' employees to perform their job duties may result in discipline up to and including discharge.