Senior Offensive Security Engineer

Experian Experian is committed to helping you protect, understand, and improve your credit. Start with your free Experian credit report and FICO® score.
View company page
Experian’s Offensive Security team is charged with improving the organisation’s security posture through clarifying risk and verifying the efficacy of our technical, people, physical and process controls from an attacker perspective. In order to accomplish this, the team performs regular Adversary Simulation (Red Team) testing, leads and contributes to Purple Team Exercises and performs Ad-Hoc and Tactical Assessments based on changes to the threat landscape and organisational needs.As a Senior Engineer within the Offensive Security team, you will participate in the design and execution of both campaign-based adversary simulation assessments and tactical assessments, whilst contributing to collaborative purple team exercises.Perform engagement at multiple organisational levels, from senior leaders to technical analysts to help drive risk understanding and verify the efficacy of remediation/mitigative actions.Actively participate in performing physical exploitation, network exploitation and social engineering assessments against authorized targets.Leverage CyberThreat Intelligence, Offensive Security Research, previous Adversary Simulation (Red Team) findings and internal risk intelligence to develop test cases demonstrating TTP effectiveness against Experian’s control environment.Provide remediation recommendations across the organisation to aid with remediation/mitigation of identified Cyber Risks.Leverage MITRE ATT&CK Framework and other structured attack analysis tools to describe and classify attacker methodology and significance.QualificationsWhat your background looks likeExperience: Proven experience in offensive security and adversarial simulation focused positions.Proficient in attacker tooling, including post-exploitation frameworks and tooling.Detailed knowledge of global cyber threats, threat actors, and the tactics, techniques and procedures used by cyber adversaries, specifically those targeting the financial services and healthcare sectors.Demonstrable experience in two or more of the following areas:Email, phone, or physical social-engineering assessmentsDeveloping, extending, or modifying exploits, shell code or exploit toolsRed/Purple teaming exercisesCovert physical intrusionCloud securityNetwork penetration testing and manipulation of network infrastructureWeb application penetration testing assessmentsBackground working with at least one programming language (C, C++, C#, Go) and one scripting language(Python, PowerShell, Bash, Ruby)Additional InformationDiscover the UnexpectedExperian is the world’s leading global information services company. We’re passionate about unlocking the power of data in order to transform lives and create opportunities for consumers, businesses and society. For more than 125 years, we’ve helped economies and communities flourish – and we’re not done.Our 21k amazing employees in 40+ countries believe the possibilities for you, and the world, are growing. We’re investing in the future, through new technologies, talented people and innovation so we can help create a better tomorrow. To do this we employ the brightest minds that share our purpose and want to make a difference.Our uniqueness is that we truly celebrate yours.Experian's culture and people are key differentiators. We take our people agenda very seriously. We focus on what truly matters; DEI, work/life balance, development, authenticity, engagement, collaboration, wellness, reward & recognition, volunteering... the list goes on. We’re an award winning organisation due to our strong people first approach.Innovation is a critical part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.#LI-CC1Experian Careers - Creating a better tomorrow togetherExplore more InfoSec / Cybersecurity career opportunitiesFind even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
#J-18808-Ljbffr