REMOTE - AI Threat Emulation Capabilities Developer

Huntington National Bank; Detroit (MI); On-site; USD 93,000 - 189,000; Full time

Job summary

Huntington National Bank is seeking a Principal Cybersecurity Red Team Analyst to plan and direct threat actor emulation efforts and lead the use of emulation tools within the Huntington environment.

The role emphasizes testing security controls, identifying gaps, and prioritizing risk across the financial services domain. You will assist the Red Team manager and help develop team capabilities while coordinating cross-functional remediation strategies.

Qualifications

• 7-10+ years of Cyber Security experience.
• 5-7+ years of Penetration testing/Red team experience.
• Associate's degree or 4+ additional years of equivalent experience.

Responsibilities

• Develop and test threat actor emulation tools for the Red Team to use in assessments of security controls.
• Partner with threat intelligence to ensure Red Team capabilities accurately emulate the current threat landscape.
• Consult with cross-functional teams to ensure controls are in place to remediate threats and test controls as appropriate.
• Coordinate and monitor 3rd-party penetration testing engagements and ensure timely, accurate reporting of results.
• Assist in developing remediation plans for findings with different system owners.
• Develop and mentor Red Team members.

Skills

Cyber Security

Penetration testing/Red team

Education

Associate's degree

4+ years equivalent experience

Job description

Summary

The Cybersecurity Red Team Analyst - Principal will plan and direct efforts in developing and testing tools, tactics, and procedures to emulate adversarial threats actively in use targeting the financial services industry and leads the employment of these tools in the Huntington environment. This capability provides Huntington with a means of testing security controls for effectiveness, discovering gaps in controls, and validating viability of threats for more effective prioritization of risks. The principle role will also assist the Red Team manager in assessing and developing team capabilities.

Description

The Cybersecurity Red Team Analyst - Principal will plan and direct efforts in developing and testing tools, tactics, and procedures to emulate adversarial threats actively in use targeting the financial services industry and leads the employment of these tools in the Huntington environment. This capability provides Huntington with a means of testing security controls for effectiveness, discovering gaps in controls, and validating viability of threats for more effective prioritization of risks. The principle role will also assist the Red Team manager in assessing and developing team capabilities.

Duties & Responsibilities

• Develop and test threat actor emulation tools, tactics, and procedures for the Red Team to employ on-demand for assessments of security controls for application, systems, and network.
• Partner with threat intelligence team to ensure Red Team capabilities and tactics accurately emulate the current threat landscape.
• Consult with cross-functional teams in project testing phases to ensure controls are in place to remediate threats and test controls as appropriate.
• Consult with cross-functional teams for architectural design and review sessions to ensure controls are in place to remediate threats and test controls as appropriate.
• Coordinate and monitor 3rd-party penetration testing engagement staff to ensure engagements meet all requirements with appropriate communications and timely and accurate reporting of results.
• Assess, train, and develop Red team members.
• Partner in developing remediation plans for findings through coordination with cross-functional teams for various application and technology system owners.
• Other duties as assigned.

Basic Qualifications

• 7-10+ years of Cyber Security experience.
• 5-7+ years of Penetration testing/Red team experience.
• Associate's degree or 4+ additional years of equivalent experience.

Preferred Qualifications

• Experience developing AI red team and/or AI threat emulation capabilities
• Ability to evaluate 3rd party AI red team and/or AI threat emulation capabilities
• Expert understanding of security architecture and tools
• Expert understanding of Threat Actors and their tactics, techniques, and procedures
• Advanced experience with Security Assessment Toolsets
• Advanced experience in automation and scripting of applications and systems
• Expert knowledge of relational databases and structured query language
• Expert knowledge of client/server relationships and multi-tier environments
• OSCP, GPEN, OSCE, GCIH, GXPN
• Ability to communicate clearly and concisely

Exempt Status

(Yes = not eligible for overtime pay) (No = eligible for overtime pay)

Yes

Workplace Type

Remote

Our Approach to Office Workplace Type

Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds: in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.

Compensation Range

$93,000 - $189,000 Annual Salary

The compensation range represents the anticipated low and high end of the base compensation range for this position. Actual compensation will vary based on various factors including but not limited to location, experience, and education. Colleagues in this position are also eligible to participate in an applicable incentive compensation plan. In addition, Huntington provides a variety of benefits to colleagues, including health insurance coverage, wellness program, life and disability insurance, retirement savings plan, paid leave programs, paid holidays and paid time off (PTO).

Equal Opportunity Employer Statement

Huntington is an Equal Opportunity Employer.

Tobacco-Free Hiring Practice

Visit Huntington's Career Web Site for more details.