Senior Red Team Analyst

Manpower, Inc.; Lancashire; Hybrid; GBP 36,000 - 60,000; Full time

Benefits offered by this job

Bonus

Job summary

Manpower, Inc. is seeking a Senior Red Team Analyst for a mostly remote role with 2 days on-site per month. You will test and validate security controls and SOC detection capabilities, providing assurance to Cyber Operations leadership that defensive measures remain effective against evolving threats.

The position offers up to £60k plus bonus and benefits. Core duties include supporting the Red Team with exercises, critical control testing, cyber hygiene assessments and penetration testing;

Qualifications

• Proven experience in infrastructure and web application security testing using established methodologies.
• Demonstrable experience with open-source security testing tools (Kali Linux, Parrot OS).
• Understanding of software engineering principles.
• Confident in delivering comprehensive security testing reports and briefings when required.
• Broad knowledge of firewalls, IDS/IPS, Active Directory, endpoints, Windows/Linux servers, TCP/IP, networks, cloud, CDN, and vulnerability management.

Responsibilities

• Provide continual testing and validation of security controls and SOC detection capabilities.
• Maintain and deliver accurate security reports and briefings for internal audiences.
• Identify security weaknesses and coordinate with resolver groups for remediation.
• Contribute to Red Team service development across people, processes, and technology.
• Stay current on external threat environment and attacker tactics, techniques, and procedures.

Skills

Security testing

Software engineering principles

Reporting and briefing

Network and security technologies

Tools

Kali Linux

Parrot OS

Job description

Senior Red Team Analyst Mostly Remote(2 Days onsite p/m) Up to £60k + Bonus/Benefits

The Role:

You will be responsible for the continual testing and validation of security controls and SOC detection capabilities, providing assurance that defensive measures remain effective against evolving threats. The role contributes to the achievement of organisational and departmental objectives while maintaining high security standards and providing assurance to Cyber Operations leadership on the effectiveness of security monitoring and detection capabilities.

Core duties:

• Support the Red Team with the following activities; Red Team Exercises, Critical Control Testing, Cyber Hygiene Assessments and Penetration Testing
• Develop comprehensive and accurate reports for internal audiences, ensuring the grading of vulnerabilities within the context of BAE Systems, and passing onto resolver groups for resolution. Ensures resolution is being conducted in line with documented process
• Identify security weaknesses and misconfigurations to ensure they are raised with the appropriate resolver groups
• Contributes to the development of Red Team services through people, process, and technology where appropriate
• Maintains a broad understanding of the external threat environment and attacker tactics, techniques, and procedure

Essential Skills:

• Proven experience in both infrastructure and web application security testing utilising proven testing methodologies
• Demonstrable experience with open-source security testing tools such as Kali and Parrot operating systems
• An understanding of software engineering principles
• Confident in delivering comprehensive and accurate security testing reports for internal audiences and delivering briefings on the outcome if required
• Broad and detailed experience of technologies including but not limited to firewalls, IDS/IPS, Active Directory, endpoint protection, Windows Server, Linux, TCP/IP, Networks, Cloud, CDN's and Vulnerability Management