Cybersecurity Sr. Engineer - Red Team

Company: The Home Depot
Location: Pflugerville
Posted on: September 9, 2020

Job Description:

POSITION PURPOSEAt The Home Depot, our Cybersecurity team plays a pivotal role in creating and implementing solutions to protect our associates, customers, and communities from internal and external security threats.

The Red Team was established to challenge assumptions within the environment, train network defenders, and help increase the security posture of the enterprise through providing subject matter expertise and obscure vulnerability discovery. This position will be responsible for planning, executing, and reporting on full-scope, large-scale attack simulations that mimic tradecraft utilized by adversaries targeting large enterprise environments. Other responsibilities include conducting one-off penetration testing as needed, Purple Team exercises with the Threat Detection and Response Team, providing subject matter expertise in support of the Threat Intelligence Team, and educating a variety of teams, to include developers, engineers, and analysts on offensive security tradecraft and mitigation strategies.

Lets protect the future of retail together.MAJOR TASKS, RESPONSIBILITIES AND KEY ACCOUNTABILITIES

• 
  
• 10% - Planning & Analysis:Researches and analyzes business trends and behavioral data to identify opportunities for improvements and new initiativesDrives the evaluation, development, and recommendation of specific technology products and platforms to provide cost-effective solutions that meet business and technology requirements Researches and designs best fit infrastructure, network, database, and security architectures for products Proactively creates and maintains tools for monitoring and support Participates in project planning and reporting across multiple efforts
• 30% - Delivery & Execution: Drives configuration, debugging, and support for infrastructure Documents, reviews and ensures that all quality and change control standards are met Drives field and corporate roll-outs of technology Drives the stand up of necessary system software, hardware, and equipment (physical or virtual) to meet changing infrastructure needs
• 50% - Support & Enablement: Collaborates with product and project teams to understand needs and enable them with infrastructure Supports technology architecture design review efforts for project and product teams Leverages tooling and custom applications to monitor the operational status of applications, infrastructure, networks, databases, and security; optimizes and tunes performance as appropriate Drives root cause analysis, debugging, support, and post-mortem analysis for security incidents and service interruptions Maintains, upgrades, and supports existing systems and infrastructure to ensure operational stability Opens and manages vendor problem tickets to resolution Drives the production of in-house documentation around solutions Monitors tools and proactively helps teams struggling with systems issues Provides application support for software running in production Creates scripts and tools that drive automation and enable product teams and end users to move towards self service
• 10% - Learning: Keeps abreast of innovations and industry trends as well as changes to internal systems and determines how they impacts tools, training, and support necessary to keep systems up, running, and secure Participates in and contributes to learning activities around modern systems engineering core practices (communities of practice) Proactively views articles, tutorials, and videos to learn about new technologies and best practices being used within other technology organizations
  
  
  NATURE AND SCOPE
  
  Typically reports to the Systems Engineer Manager or Sr. Manager.
  
  ENVIRONMENTAL JOB REQUIREMENTS
  
  
  
  Environment:
  
  Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
  
  Travel:
  
  Typically requires overnight travel less than 10% of the time.
  MINIMUM QUALIFICATIONS
  
  Must be eighteen years of age or older.
  
  Must be legally permitted to work in the United States.
  
  
  Education Required:
  
  The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.
  
  
  
  Years of Relevant Work Experience: 1 years
  
  Physical Requirements:
  
  Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.
  
  
  Preferred Qualifications:
  
  Knowledge of operating systems such as Windows, Linux, Unix, MacOS
  
  Knowledge of enterprise technologies (Database Systems, Network Equipment, Applications)
  
  Knowledge of OSINT and information gathering techniques
  
  Knowledge of Penetration Testing Execution Standard (PTES)
  
  Knowledge of network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)
  
  Knowledge of wireless technologies and common attacks (802.11x, WEP, WPA, WPA2)
  
  Basic programming and scripting experience (Python, Bash, Powershell, Ruby)
  
  Web development and knowledge of web technologies skills is a plus
  
  Basic knowledge of penetration testing tools (Metasploit, Nmap, Burp Suite)
  
  Passionate about technology and how computers operate
  
  Capture The Flag experience (Conferences, VulnHub, exploit exercises) is a plus
  
  Diligent about keeping current with security news, trends, and emerging threats
  
  Security Operation Center (Blue Team) experience is a plus
  
  Strong communication skills (written and verbal) emphasis on technical documentation
  
  Vulnerability assessment and code review skills is a plusKnowledge, Skills, Abilities and Competencies:
  
  
  • 
    
  • Action Oriented: Taking on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm
  • Collaborates: Building partnerships and working collaboratively with others to meet shared objectives
  • Communicates Effectively: Developing and delivering multi-mode communications that convey a clear understanding of the unique needs of different audiences
  • Cultivates Innovation: Creating new and better ways for the organization to be successful
  • Drives Results: Consistently achieving results, even under tough circumstances
  • Global Perspective: Taking a broad view when approaching issues; using a global lens
  • Interpersonal Savvy: Relating openly and comfortably with diverse groups of people
  • Manages Ambiguity: Operating effectively, even when things are not certain or the way forward is not clear
  • Nimble Learning: Actively learning through experimentation when tackling new problems, using both successes and failures as learning fodder
  • Self-Development: Actively seeing new ways to grow and be challenged using both formal and informal development channels
  • Situational Adaptability: Adapting approach and demeanor in real time to match the shifting demands of different situations
    

Keywords: The Home Depot, Pflugerville , Cybersecurity Sr. Engineer - Red Team, Engineering , Pflugerville, Texas