Red Team Operator (Expert IT Security Specialist)

Nordea Bank Abp; Warszawa; Hybrid; PLN 110.000 - 190.000; Vollzeit

Zusammenfassung

Nordea Group is seeking a Red Team Operator (Expert IT Security Specialist) to join the Offensive Testing team within Cyber Security. You will participate in Red Team exercises, oversee external vendors, and collaborate with Blue Team during Purple Team engagements to advance security capabilities across the bank.

You will have 3+ years of hands-on experience with Red/Purple Team activities, MITRE ATT&CK, and scripting, and you will communicate complex issues clearly to business stakeholders.

Qualifikationen

• 3+ years of professional experience in red/purple team exercises.
• Hands-on experience with command and control tools, fuzzing, breach attack simulation tools.
• Regulatory based red teaming experience (e.g. TIBER, CBEST, iCAST, FEER, AASE).
• Working knowledge of Windows and Linux, networks, scripting (Python, Bash, PowerShell, Perl).
• Strong English written and spoken communication.

Aufgaben

• Participate in Red Team exercises (TLPT and TIBER) including preparation, execution and reporting phases.
• Oversee external vendors for offensive security exercises.
• Collaborate with Blue Team and stakeholders during Purple Team engagements.
• Plan and report on offensive security projects such as Security Control Testing, War Gaming, Attack Path Mapping.
• Be a subject matter expert in Offensive Security.

Kenntnisse

Red Teaming

Purple Teaming

English communication

Analytical thinking

Independent work

Tools

Command & Control tools

Fuzzing

Exploit development

MITRE ATT&CK

Jobbeschreibung

Select how often (in days) to receive an alert: Create Alert

Red Team Operator (Expert IT Security Specialist)

Job ID:3291

Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea’s transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.

We are looking for an Expert with the Red Teaming skills and knowledge from cyber security area, to help out Offensive Testing team in Cyber Security department get fast paced in their undertakings. This is an opportunity for you to work in a fast-pacing environment and protect the bank.

Nordea is a place where traditions meet tomorrow. We're not just a bank, we’rea tech employer on a mission to evolve finance securely and responsibly. Together, we impact millions of people’s daily lives by ensuring they can access our solutions anytime, anywhere, while safeguarding their personal data and wealth. Join us in making an impact on the banking industry.

About our team

Meet the Offensive Testing team. You’ll join Cyber Security department, where we protect the bank.

Main responsibilities in this role:

• Participating in Red Team exercises (TLPT and TIBER), including preparation, execution and reporting phase
• Overseeing the external vendors for the offensive security exercises
• Cooperating with the Blue Team and various stakeholders during the Purple Teaming engagements
• Preparing, executing and reporting offensive security projects like Security Control Testing, War Gaming, Attack Path Mapping
• Be a subject matter expert in the Offensive Security area

Who you are

Your background and skills include:

3+ years of professional experience:

• Hands-on experience in Red and Purple Team exersices
• Practical experience with Command and Control tools, writing exploits, fuzzing, breach attack simulation tools
• Experience in a regulatory based Red Teaming (e.g. TIBER, CBEST, iCAST, FEER, AASE)
• Working experience with Mitre’s ATT&CK framework
• Good analytical skills
• Ability to work independently
• Proficiency in explaining complex and technical problems to a business oriented audience
• Solid understanding of:
  • Windows and Linux operating system
  • Networks/networking
• Familiarity with scripting languages (e.g. Python, Bash, PowerShell, Perl) and coding languages (e.g. C/C++, Java, C#) is a must
• You have good English written and spoken communication skills

What we offer

Collaboration. Ownership. Passion. Courage. These are the values that guide us in how we work and how we make decisions – and that we imagine you share with us.

People are driven by many different factors. For some, it’s to take their career to the next level. For others, it’s to break new ground within their area of expertise – in other words, with us, you will always move forward.

A culture that fosters performance and growth in one of the largest Nordic banks, offering various opportunities to evolve, develop and learn from brilliant colleagues with diverse backgrounds in a vibrant working environment.

Hybrid working model – we believe in the value of bringing people together and at the same time we embrace the freedom of flexibility.

Diversity and inclusion are a natural part of our daily work. We know that an inclusive workplace is a sustainable one. We genuinely believe that our diverse backgrounds, experiences, characteristics and traits make us stronger together. Every day we strive to find new ways to improve diversity and inclusion within our community e.g. we have signed the European Diversity Charters in the countries where we operate to show our commitment and engage with others to continue learning and improving.

We reserve the right to reply only to selected applications.

Next steps

The recruitment process consists of the following steps:

• Preliminary CV selection
• Phone conversation with the recruiter
• Online interview with the hiring leader
• Practical test
• Background check

We enable dreams and aspirations for a greater good.

We build relationships. We add a personal touch to everything we do – when advising our customers, collaborating with colleagues, and meeting our potential candidates.

We learn and develop. We take pride in being experts and thinking ahead. We use our expertise to meet our customers’ needs, from the simplest to the most complex. We bring a growth mindset to our work that enables us to focus on a broader perspective in our daily challenges.

We lead change. We are responsible and aware of the impact of our decisions, both for our customers and for our local and global communities. Mindful of our responsibility towards current and future generations, we have made sustainability an integrated part of our business strategy.

We are Nordea. We have a 200-year history of supporting and growing the Nordic economies and our values are deeply rooted in these open, progressive and collaborative societies. As one of the biggest employers in the Nordics, Poland and Estonia, you have excellent opportunities to evolve, develop and move forward with us. Studies show that members of underrepresented communities don’t apply for jobs unless they tick all the qualification boxes. If this is part of why you hesitate to apply, we would like you to reconsider and give it a chance. Maybe your profile fits our needs much better than you think.

For candidates in Finland:

For candidates in Poland: Please include permit for processing personal data in CV as following:

In accordance with art. 6 (1) a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter ‘GDPR’. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp.

The administrator of your personal data is: Nordea Bank Abp operating in Poland through its Branch, address: Aleja Edwarda Rydza Śmiglego 20, 93-281 Łodź. Your personal data will be processed for the recruitment processes in Nordea Bank Abp. You have a right to access your personal data, right to rectify and right to delete. Disclosing the personal data in the scope specified by the provisions of Polish Labour Code from 26 June 1974 and executive acts are mandatory. Providing personal data is necessary to conduct the recruitment processes. The request for the deletion of your personal data means resignation from further participation in recruitment processes and causes the immediate removal of your application. Detailed information concerning processing of your personal data can be found at: https://www.nordea.com/en/doc/nordea-privacy-policy-for-applicants.pdf