The Red Team Lead will be responsible for the planning, development and implementation of enterprise information security solutions (such as authentication and authorization, public key infrastructure, data loss prevention, and security event information management) to address the current and emerging security needs of the business. This role requires the proactive identification and solution of some of the most complex enterprise-scale information security problems. The role will research, design, and develop new technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors. The person in this role will contribute to the development and execution of strategic information security architecture to enable effective business operations, manage enterprise risk, and address business or regulatory issues.

• Develops Red Team processes, strategies, engagements, and service roadmaps with an eye toward the unique needs of the business and industry.
• Builds custom exploits, toolkits, services, and cloud infrastructure to automate common tasks with appropriate logging and opsec.
• Works with internal teams to measure and improve detection and response.
• Demonstrates low-level dev skills in the areas of exploitation and capability development.
• Able to develop TTPs to effectively emulate a variety of threat actor levels and profiles.
• Designs, builds, and leads a team that ensures the security of enterprise data and systems by developing enterprise information security solutions.
• Creates and updates a view of IT assets, related attack surfaces, and threat actors to illustrate the flow of data and associated security threats.
• Researches, designs, and develops new enterprise technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors.
• Serves as a security expert in application development, database design, network, and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices.
• Analyzes business impact and exposure based on emerging security threats, vulnerabilities, and risks and contributes to the development and maintenance of information security strategy and architecture.
• Engages with security specialists, enterprise architects and other functional area architects to ensure adequate enterprise security solutions are in place to sufficiently mitigate identified risks, and to meet business objectives and regulatory requirements.
• Serves as a cybersecurity subject matter expert, assessing the business impact of cybersecurity risks to the enterprise and identifying options and recommendations for mitigating those risks.
• Works with Enterprise Architects and other functional area architects and security specialists to ensure adequate security solutions are in place throughout all IT systems and platforms to mitigate identified risks sufficiently and support business objectives.
• Serves as an expert in platform, application, storage, network, virtualization, cloud and mobile security best practices.
• Exercises thought leadership in the creation and maintenance of security architectures.

• Exhibits a comprehensive understanding of architecture-level information security and enforcement technologies, including advanced malware detection/prevention, mobile device virtualization/MDM, cloud security management, database encryption (both structured and unstructured), mobile application and remote API security, fine-grained application authorization and access control, security event visualization, big data user and entity behavior analytics, and active adversary deception.
• Demonstrates a strong grasp of contemporary security theory and its application, including knowledge of vulnerabilities, exploitation techniques, and attack vectors.
• Exhibits a solid understanding of the systems development lifecycle, with the ability to lead multifunctional projects or initiatives.
• Possesses familiarity with laws, regulations, and standards relevant to the US Healthcare industry.
• Possesses excellent written and verbal communication skills, including technical writing, documentation development, process mapping, and visualization.
• Communicates technical concepts effectively to non-technical audiences.
• Provides information security industry thought leadership and innovation accomplishments, which are desired but not required.

• Competitive base and incentive pay
• 401(k) with robust matching and non-matching contributions
• Rich medical & pharmacy benefits
• 100% employer-paid dental and vision benefits
• Holistic wellbeing program with deep financial incentives
• Generous paid time off plus 12 paid holidays and your birthday off
• Culture of growth and learning: career development; tuition reimbursement; recognition program
• Family support: adoption assistance, fertility treatment, child, elder & pet care assistance
• Social responsibility and volunteer opportunities
• Employee discount program