Red Team Analyst

TMNA Services LLC; Lower Merion Township (Montgomery County); On-site; USD 95,000 - 105,000; Full time

Benefits offered by this job

Bonus eligibility

Job summary

TMNA Services LLC in the United States is seeking a Red Team Analyst to support adversary simulation engagements and identify security risks across the organization. You will help plan, execute, and report on offensive security activities to strengthen defenses.

You will develop tools and infrastructure for Red Team operations, align with global standards, and deliver clear executive briefings. A strong foundation in scripting and cloud security is valued, with opportunities to grow within Tokio

Qualifications

• 1-3 years Red Team (Adversary Simulation), Penetration Testing, or similar experience in a technical role
• Exposure to Tokio Marine systems and policies preferred
• Foundational knowledge of Red Team engagement concepts, including reconnaissance, initial access, privilege escalation, lateral movement, persistence, credential access, and command and control
• Experience conducting hands-on technical Red Team and/or government computer network exploitation/attack operations experience, including familiarity with red teaming post exploitation frameworks and C2 frameworks
• Ability to use scripting or programming languages to automate tasks and support offensive security tooling
• Experience in software development, including red teaming tools, custom malware, trojans, shellcode, using low-level languages
• Working knowledge of Windows & Linux internals, system calls, and other operating systems internals for offensive security purposes
• Experience in delivering technical and executive-level red team reports and briefings
• Knowledge of common bugs or misconfigurations in software and cloud infrastructure (AWS, GCP, and Azure)
• Industry security certification (GPEN, GXPN, OSCE, OSCP, OSEP, CRTO) preferred
• Fluency in a foreign language is highly desirable

Responsibilities

• Assist with Red Team engagements throughout the engagement lifecycle, including planning, scoping, execution, cleanup, and reporting
• Conduct hands-on adversary simulation and offensive security testing under guidance of experienced Red Team members
• Assist in developing tools, methodologies, and infrastructure to support Red Team engagements
• Deliver well-written technical and executive-level Red Team reports and briefings
• Align with counterparts globally to build and enforce standards and frameworks pertaining to Red Team engagements and findings

Skills

Red Team (Adversary Simulation)

Penetration Testing

Scripting (Bash/PowerShell/Python/C#)

Cloud security (AWS/GCP/Azure)

Windows/Linux internals

Executive-level reporting

C2 frameworks

Red Team tools

Post-exploitation frameworks

Tools

C2 frameworks

Red Team tools

Post-exploitation frameworks

Job description

Marketing Statement

Tokio Marine North America Services (TMNAS) provides professional support services to Tokio Marine Group companies in the United States, including Tokio Marine America, First Insurance Company of Hawaii, and Philadelphia Insurance Companies. Customer service is our focus and our passion! Tokio Marine North America Services adds value in all that we do, providing the best professional service to our business partners, allowing them to achieve their goals. Our talented team delivers actuarial, audit, corporate communications, financial and investment, human capital services, information technology, legal, and payroll expertise to our customers.

Job Summary

As a Red Team Analyst, you will support Red Team engagements and proactively uncover security risks, equipping the Global Fusion Center (GFC), and Tokio Marine Group Companies with advanced offensive capabilities to remediate cyber risks. You will rapidly grow to understand the Group Companies' business priorities and create ways Red Team engagements can help to uncover and mitigate their cyber risks. You will assist with adversary simulation activities, security research, engagement infrastructure, and the development of offensive security tools and techniques to further the Red Team’s capabilities.

Essential Job Functions

• Assist with Red Team engagements throughout the engagement lifecycle, including planning, scoping, execution, cleanup, and reporting
• Conduct hands-on adversary simulation and offensive security testing under the guidance of experienced Red Team members
• Assist in developing tools, methodologies, and infrastructure to support Red Team engagements
• Deliver well-written technical and executive-level Red Team reports and briefings
• Align with counterparts globally to build and enforce standards and frameworks pertaining to Red Team engagements and findings

Qualifications

• 1-3 years Red Team (Adversary Simulation), Penetration Testing, or similar experience in a technical role
• Exposure to Tokio Marine systems and policies preferred
• Foundational knowledge of Red Team engagement concepts, including reconnaissance, initial access, privilege escalation, lateral movement, persistence, credential access, and command and control
• Experience conducting hands-on technical Red Team and/or government computer network exploitation/attack operations experience, including (but not limited to) familiarity with using, modifying, and customizing red teaming post exploitation frameworks and Command & Control (C2) frameworks
• Ability to use scripting or programming languages such as Bash, PowerShell, Python, C#, or similar languages to automate tasks and support offensive security tooling
• Experience in software development, including red teaming tools, custom malware, trojans, shellcode, et al., using low-level languages (C, C++, assembly, etc.)
• Working knowledge of Windows & Linux internals, system calls, and other operating systems internals and how to leverage them for offensive security purposes
• Experience in professionally delivering technical and executive-level red team reports and briefings
• Knowledge of common bugs or misconfigurations in software and cloud infrastructure (AWS, GCP, and Azure).
• Industry security certification (GPEN, GXPN, OSCE, OSCP, OSEP, CRTO) preferred.
• Fluency in a foreign language is highly desirable, but not required

Salary

Salary range $95,000 to $105,000. Ultimate salary offered will be based on factors such as applicant experience and geographic location.

Benefits

Our company offers a competitive benefits package and bonus eligibility on top of base.

EEO Statement

Tokio Marine Group of Companies (including, but not limited to the Philadelphia Insurance Companies, Tokio Marine America, Inc., TMNA Services, LLC, TM Claims Service, Inc. and First Insurance Company of Hawaii, Ltd.) is an Equal Opportunity Employer. In order to remain competitive we must attract, develop, motivate, and retain the most qualified employees regardless of age, color, race, religion, gender, disability, national or ethnic origin, family circumstances, life experiences, marital status, military status, sexual orientation and/or any other status protected by law.

Tokio Marine Group of Companies (including, but not limited to the Philadelphia Insurance Companies, Tokio Marine America, Inc., TMNA Services, LLC, TM Global Services LLC, TM Claims Service, Inc. and First Insurance Company of Hawaii, Ltd.) is an Equal Opportunity Employer. In order to remain competitive we must attract, develop, motivate, and retain the most qualified employees regardless of age, color, race, religion, gender, disability, national or ethnic origin, family circumstances, life experiences, marital status, military status, sexual orientation and/or any other status protected by law.