Red Team / Adversary Emulation Manager (m/f/d)*

IT-Systemhaus der Bundesagentur für Arbeit; München; Hybrid; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

Ein führendes Unternehmen im Bereich IT-Sicherheit in München sucht einen Red Team / Adversary Emulation Manager (m/w/d). Die Rolle umfasst die Bewertung der Cyber-Resilienzfähigkeiten und das Management von Bedrohungsgeleiteten Penetrationstests. Ideal ist eine akademische Ausbildung im MINT-Bereich und mindestens fünf Jahre Erfahrung in der Cyber-Sicherheit. Das Unternehmen bietet wettbewerbsfähige Gehälter und flexible Arbeitsmodelle, einschließlich hybrider Optionen.

Leistungen

Diversity, Equity & Inclusion

Fortlaufendes Lernen

Karrieremobilität

Gesundheitsmanagement

Wettbewerbsfähiges Gehalt

Altersvorsorge

Work-Life-Balance

Qualifikationen

• Wenigstens fünf Jahre Berufserfahrung, einschließlich mindestens drei Jahre in Red Teaming oder Penetration Testing.
• Fähigkeit, komplexe technische Themen klar zu kommunizieren.
• Erfahrung in der Zusammenarbeit mit Regulierungsbehörden.

Aufgaben

• Bewertung der Cyber-Resilienzfähigkeiten des Unternehmens.
• Durchführung von Bedrohungsgeleiteten Penetrationstests.
• Überprüfung der Wirksamkeit von Kontrollen der operativen Einheiten.

Kenntnisse

IT-Sicherheit

Kommunikationsfähigkeit

Penetration Testing

Red Teaming

Cyber Bedrohungsintelligenz

Ausbildung

Akademischer Abschluss in einem MINT-Fach

Tools

MITRE ATT&CK Framework

EU DORA Vorschriften

Jobbeschreibung

Red Team / Adversary Emulation Manager (m/f/d)*

Red Team / Adversary Emulation Manager (m/f/d)*

Beginn

• Risk-Manager/in

Munich Re is one of the world's leading providers of reinsurance, primary insurance and insurance-related risk solutions. The group consists of the reinsurance and ERGO business segments, as well as the capital investment company MEAG. We are globally active and operate in all lines of the insurance business.

Since our founding in 1880, we've been known for our unrivaled risk-related expertise and sound financial position. We offer customers financial protection when faced with exceptional levels of damage - from the 1906 San Francisco earthquake to the 2017 Atlantic hurricane season. We possess outstanding innovative strength, which enables us to also provide coverage for extraordinary risks such as rocket launches, renewable energies, cyber attacks, or pandemics.

We're also playing a key role in driving forward the digital transformation of the insurance industry, and in doing so have further expanded our ability to assess risks and the range of services that we offer. Our tailor-made solutions and close proximity to our customers make Munich Re one of the world's most sought-after risk partners for businesses, institutions, and private individuals.

Our corporate culture is defined by performance, mutual respect and trust. All this makes us an attractive employer providing global career development opportunities and prospects.

The section ICT risk assurance is a central team of subject matter experts in the area of information and communication technology risks (ICT risks) and related risk management topics. As part of the group's information security governance function, our team possesses the necessary specialist knowledge to advance the groups ICT control frameworks, challenge operational units, coordinate global exercises as well as respond to incidents of global relevance.

We maintain strong relationships with other central non-financial risk (NFR) functions, the regional NFR heads as well as relevant operational functions such as central IT, central procurement and global real estate & services. Additionally, we closely collaborate with the primary insurance segment (ERGO group) and enable cross-segment information sharing.

Your Job

As a subject matter expert, you will be responsible for both supporting and supervising the group's ICT risk and governance capabilities. Your role comprises amongst others:

• Assessing the Munich Re group's cyber resilience capabilities by managing adversary emulation exercises/ threat-led penetration tests (TLPTs)
• Reviewing the effectiveness of controls implemented by the operational units (1st line of defense)
  Collaborating with the 1st line of defense of the primary insurance (ERGO group) and the Reinsurance Group, foster information sharing between those and support with a Munich Re groupwide view on cyber threats

Your Profile

• Academic degree in a STEM field with solid knowledge of IT security
• The ability to efficiently communicate highly complex technical matters to non-technical audiences such as C-suite executives
• A minimum of five years of professional experience, including at least three years in red teaming, penetration testing, detection engineering, incident response or cyber threat intelligence
• Expertise in utilizing the MITRE ATT&CK framework
• Familiarity with the EU DORA regulations and its requirements regarding threat-led penetration tests (TLPTs) or the former TIBER-EU framework
• Experience in the cooperation with regulatory bodies
• If you are genuinely interested to play an active role in shaping a new function and have the necessary background, we look forward to receiving your application

Application Instructions

In order to consider your application, we require your application to be submitted via our online applicant portal. In addition to uploading your CV, we recommend writing a cover letter to tell us more about why the position is of interest to you.

About us

As the world's leading reinsurance company with more than 16,000 employees at over 50 locations, Munich Re introduces a paradigm shift in the way you think about insurance. By turning uncertainty into a manageable risk we enable fundamental change. Join us working on topics today that will concern society tomorrow, whether that be climate change, major construction projects, medical risk assessment or even space travel.

Together we embrace a culture where multiskilled teams dare to think big. We create the new and the different for our clients and cultivate innovation.

Sounds like you? Push boundaries with us and be part of Munich Re.

Our employees are our greatest strength. That's why we offer them a wide range of benefits. You can find some examples below.

Unlock your potential3>

• Diversity, Equity & Inclusion: we embrace the power of differences and are convinced that diversity fosters innovation and resilience and enables us to act braver and better.
• Continuous Learning: we believe that continuous learning is a key differentiator and critical for building new skills and accelerating growth.
• Career Mobility: we actively support career mobility, and our strong global and regional presence offers a wealth of career growth opportunities for you.

Rewards & Recognition

Competitive salary: appropriate compensation for your high level of commitment.

Retirement provision: state of the art in-house pension solutions.

Work-life balance: promoting the compatibility of family and work in addition to overall work-life balance.

Health management: focus on your physical and mental health far beyond legal requirements.

Hybrid working: living the best of both worlds - we offer you a very flexible approach as well as the opportunity to work from abroad on an occasional basis.

Munich Re not only stands for fairness with regard to its clients; it is also an equal opportunities employer. Severely disabled candidates will also be prioritized, if equally qualified.