Red Team – Security Engineer

Red Team – Security Engineer

Description

The Role

Are you interested in being the first dedicated Red Teamer at Moveworks? Do you enjoy exploiting, compromising, and circumventing systems to gain unauthorized access? Can you identify the weakest link to get into services and use that as a stepping stone into more valuable assets? If the answers are yes, we have the perfect opportunity for you.

As a Red Teamer, you’ll play offensive security across all our systems, networks, and devices. You’ll be responsible for identifying weaknesses before malicious actors—and you’ll work with our Engineering Team to close the gaps. Reporting directly to the Chief Information Security Officer, you’ll perform reconnaissance across our systems, identify targets, and attack them. You’ll also be performing phishing and social engineering attacks. To succeed in this role, you need to be familiar with existing tools, have the ability to create your own, and enable us to run them on an ongoing basis to stay secure. You’ll need to understand the potential consequences of an attack and minimize the impact on customers’ data and production services.

We’re building a team that indexes on moving fast without sacrificing security. Every day, you’ll work to solve challenging product and engineering problems and securely provide value to our customers. To be successful, you’ll partner with machine learning, search, product, infrastructure, data, and full-stack teams to identify, define and build elegant security solutions. This is an opportunity to play an integral role at the fastest-growing AI startup in its space. 

What you’ll do:

• Be responsible for the Red Team program at Moveworks
• Identify weaknesses across our services, endpoints, networks, and physical security
• Have an attacker breadth mentality and the ability to dive deep when needed
• Define Red Team scope, timelines, execution, and remediation plans
• Come up with elegant solutions to fix gaps
• Partner with Machine Learning, Search, Product, Infrastructure, Data, and Frontend Teams to design secure solutions
• Empower teams to make the right calls on security-related matters
• Build and deploy tools to eradicate systemic flaws 
• Define key security metrics and measure the effectiveness of the Red Team program

What you bring to the table:

• 2-4 years of experience in Penetration Testing, Red Teaming, Vulnerability Research, and/or Application Security
• 2+ years work experience in reviewing or coding in Python, Golang, Java, and/or C++
• Experience building long-lasting relationships with teams 
• Plan and ability to successfully deliver on Red Team engagements
• Expert knowledge of network security, application security, authentication, authorization, identity systems, encryption, and secure coding practices
• Experience with cloud infrastructure like AWS, GCP, and/or Azure
• A high level of curiosity about engineering outside of your immediate discipline and an incessant desire to learn
• Experience operating in environments with compliance requirements (SOC2, HIPAA, ISO27001, FedRAMP, etc.)
• BS+ in computer science or a related field, or equivalent relevant experience

Base Salary Compensation Range: $160,000-188,000

Benefits

Not Specified