Red Team Operator (Expert IT Security Specialist)

NORDEA Bank Abp SA Oddział w Polsce; Województwo mazowieckie; On-site; PLN 180,000 - 300,000; Full time

Job summary

NORDEA Bank Abp SA Oddział w Polsce is seeking an Expert with Red Teaming expertise to support the Offensive Testing team in Cyber Security. You will engage in fast-paced engagements, contribute to security assessments, and help protect the bank by applying a holistic view of the technology landscape.

The role focuses on executing Red Team exercises, coordinating with external vendors, and collaborating with Blue Team during Purple Teaming activities to advance Security Testing programs across

Qualifications

• 3+ years of professional experience in security testing.
• Hands-on experience in Red and Purple Team exercises.
• Penetration testing engagements performed.
• Experience with command and control tools and exploit writing.
• Familiarity with breach attack simulation tools.
• Experience with regulatory Red Teaming frameworks (e.g., TLIBER, CBEST, iCAST, FEER, AASE).
• Working knowledge of MITRE ATT&CK framework.
• Excellent analytical and communication skills.
• Ability to work independently and explain technical concepts to business.

Responsibilities

• Participate in Red Team exercises (TLPT and TIBER), including preparation, execution and reporting phases.
• Oversee external vendors for offensive security exercises.
• Collaborate with Blue Team and stakeholders during Purple Teaming engagements.
• Plan, execute and report offensive security projects like Security Control Testing, War Gaming, Attack Path Mapping.
• Be a subject matter expert in Offensive Security.

Skills

Red Team experience

Purple Team experience

Penetration testing

Exploit development

Breach simulation tools

MITRE ATT&CK

Analytical skills

Independent worker

Technical communication

Tools

MITRE ATT&CK framework

Job description

Nasze wymagania:

Who you are

Your background and skills include:

3+ years of professional experience:

• Hands-on experience in Red and Purple Team exercises
• Performing Penetration Teasting engagements
• Practical experience with Command and Control tools, writing exploits, fuzzing, breach attack simulation tools
• Experience in a regulatory based Red Teaming (e.g. TIBER, CBEST, iCAST, FEER, AASE)
• Working experience with Mitre's ATT&CK framework
• Good analytical skills
• Ability to work independently
• Proficiency in explaining complex and technical problems to a business oriented audience

Solid understanding of:

• Windows and Linux operating system
• Networks/networking
• Familiarity with scripting languages (e.g. Python, Bash, PowerShell, Perl) and coding languages (e.g. C/C++, Java, C#) is a must
• You have good English written and spoken communication skills

Zakres obowiązków:

Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea's transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.

We are looking for an Expert with the Red Teaming skills and knowledge from cyber security area, to help out Offensive Testing team in Cyber Security department get fast paced in their undertakings. This is an opportunity for you to work in a fast-pacing environment and protect the bank.

About our team

Meet the Offensive Testing team. You'll join Cyber Security department, where we protect the bank.

Main responsibilities in this role:

• Participating in Red Team exercises (TLPT and TIBER), including preparation, execution and reporting phase
• Overseeing the external vendors for the offensive security exercises
• Cooperating with the Blue Team and various stakeholders during the Purple Teaming engagements
• Preparing, executing and reporting offensive security projects like Security Control Testing, War Gaming, Attack Path Mapping
• Be a subject matter expert in the Offensive Security area