Jobs for Humanity

The Red Team is part of the broader Offensive Security team within FIS. The Red Team is responsible for designing and executing strategic offensive security operations against the FIS people, processes, and technology.. We also work closely with Threat Intel and Blue Teams for adversary TTP emulation.. FIS is looking for an experienced Senior Specialist Red Team Operator to join our dynamic team.. At least one offensive security certification such as OSCP, OSCE, GPEN, or equivalent.. Experience with command and control (C2) frameworks such as Cobalt Strike, Sliver, or Mythic.

penetration tester

Job Description Position Type : Full time Type Of Hire : Experienced (relevant combo of work and education) Education Desired : Bachelor of Computer Science Travel Percentage : 0% Job Description About FIS Are you curious, motivated, and forward-thinking? At FIS you’ll have the opportunity to work on some of the most challenging and relevant issues in financial services and technology. Our talented people empower us, and we believe in being part of a team that is open, collaborative, entrepreneurial, passionate and above all fun. About The Team The Red Team is part of the broader Offensive Security team within FIS. The Red Team is responsible for designing and executing strategic offensive security operations against the FIS people, processes, and technology. We also work closely with Threat Intel and Blue Teams for adversary TTP emulation. What You Will Be Doing FIS is looking for an experienced Senior Specialist Red Team Operator to join our dynamic team. This role involves designing, implementing, and conducting red/purple team operations and emulating threat actor tactics, techniques, and procedures. You will identify and exploit vulnerabilities, assess security postures, and provide actionable insights to strengthen our cybersecurity defenses. <ul><li> Develop and execute complex attack scenarios and simulations to emulate real-world threats and test the robustness of our cybersecurity measures.</li><li> Collaborate with cross-functional teams to analyze security findings, prioritize remediation efforts, and recommend effective mitigation strategies.</li><li> Create detailed reports outlining vulnerabilities, exploit techniques, and actionable recommendations for improving security posture.</li><li> Conduct threat hunting and map the attack surface.</li><li> Work with the business to review vulnerabilities and advise on remediation priorities.</li><li> Stay updated on emerging security threats, attack techniques, and industry best practices to enhance offensive security methodologies.</li><li> Research and development of custom tools and malware payloads to support operations.</li><li> Provide technical expertise and guidance on offensive security techniques, tools, and procedures.</li><li> Participate in knowledge-sharing activities, such as training sessions and workshops, to foster continuous learning and skill development within the organization. </li></ul>What You Bring <ul><li> A bachelor’s degree in computer science, Information Security, or a related field, or equivalent experience and skills.</li><li> At least one offensive security certification such as OSCP, OSCE, GPEN, or equivalent.</li><li> 8+ years of experience in offensive security roles, including penetration testing, red/purple teaming, and ethical hacking.</li><li> Strong knowledge of network, operating system, cloud, and web application security architecture.</li><li> Proficiency in using offensive security tools such as Metasploit, Burp Suite, Nmap, Nuclei, and Kali Linux.</li><li> Experience with command and control (C2) frameworks such as Cobalt Strike, Sliver, or Mythic.</li><li> Well-versed in at least one scripting and programming language such as Python, C++, C#, Java, Go, PowerShell.</li><li> Experience in creating custom tools and payloads that can evade defensive products.</li><li> In-depth understanding of attack vectors, exploit techniques, and vulnerability assessment methodologies, with experience in applying MITRE ATT&CK.</li><li> Excellent analytical skills with the ability to assess complex systems and identify security gaps. </li></ul>Bonus if you have <ul><li> Experience in the FinTech or Banking industries.</li><li> Familiarity with industry compliance standards and regulations (e.g., PCI DSS, ISO 27001, GDPR).</li><li> Familiarity with CBEST or TIBER assessment frameworks. </li></ul>What We Offer You <ul><li> A competitive salary and benefits</li><li> A variety of career development tools, resources and opportunities</li><li> Varied and challenging work to help grow your technical skills. </li></ul>FIS is committed to providing its employees with an exciting career opportunity and competitive compensation. The pay range for this full-time position is $117,620.00 - $197,580.00 and reflects the minimum and maximum target for new hire salaries for this position based on the posted role, level, and location. Within the range, actual individual starting pay is determined additional factors, including job-related skills, experience, and relevant education or training. Any changes in work location will also impact actual individual starting pay. Please consult with your recruiter about the specific salary range for your preferred location during the hiring process. Privacy Statement FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice. EEOC Statement FIS is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here supplement document available here For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will be required to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis. Sourcing Model Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company. #pridepass

START NEW SEARCH