red team OperatorCiena Communications Singapore Pte. Ltd

Job Description
Red Team Operator
The Red Team Operator will work within a small team of senior operators, associates, and peers to perform red team campaigns, purple team engagements, and time-boxed penetration testing projects for internal Ciena clients such as product and application teams and the broader Ciena organization. Proficiency with C2 frameworks, current tactics, techniques, and procedures (TTPs), basic scripting/programming are essential to the role. The position may require cross-functional support with other teams such as Incident Response, Monitoring & Analysis, and Threat Intelligence. In addition to core technical competencies, a strong aptitude for technical writing in reports, presentations, operating guides, and knowledge articles is vital to the role.
Responsibilities:
Candidates will need to coordinate and work with other parts of the business including IT, R&D, and other areas of the Security organization
Candidates will need to work closely with Application Security, Product Security, Monitoring & Analysis, and the Security Engineering functional areas within the Security organization
Plan and conduct offensive engagements including red team campaigns, internal/external penetration testing, purple teams, and web application assessments
Effectively communicate findings, narrative of attack paths, recommendations, replication steps, and strategy to technical and executive stakeholders
Build tools (scripts, programs, etc) and TTPs (tactics, techniques, procedures) for conducting offensive operations
Be a subject matter expert (SME) in one or more of these areas: initial access, evasion, adversary tradecraft, offensive operations within Windows/*Nix/OSX, capability development
Be a security advocate for other teams and help individuals and projects, as needed
Stay current on adversary tradecraft, TTPs, and vulnerabilities
Train fellow team members and contribute to knowledge repositories
Responsible handling, storage, and destruction of sensitive information during engagements
Qualifying Experience and Attributes:
2+ years experience in a Red Team or Penetration Testing role
Proficient in reading and modifying Python-based tools
Ability to work within a highly collaborative team environment
Foundational knowledge of defensive security concepts such as Defense-in-depth, Principle of Least Privilege, Zero Trust, etc.
Strong written and verbal communication skills
Ability to collect, organize, analyze, and communicate large amounts of technical information with attention to detail and accuracy
Proficient with Windows and Linux operating systems
Proficient with core networking concepts
Experienced with MITRE ATT&CK Framework
Preferred Experience and Attributes:
Bachelor's degree in Cybersecurity, Computer Engineering, Computer Science
8+ years experience in Security or security related fields
Cross-functional experience in SOC, IR, Forensics, Security Engineering, Threat Intelligence, or other related security field
Self-motivation to get tasks completed
Proficient writing C#, Go, and/or Rust
Strong proficiency in 1 or more additional scripting languages: PowerShell, Shell Script, and/or Perl
Ability to lead engagements or project teams