8 months ago
Base Salary
$217k - $255k/yr
Responsibilities
- Execute red-team engagements, penetration tests, adversarial simulations, and vulnerability research across critical services, infrastructure, applications, networks, offices, and processes.
- Use threat modeling to identify threats, shape red-team priorities, validate assumptions, and articulate security risks to working groups.
- Develop tooling to automate red-team assessments and conduct exploit development using public proof-of-concept code where appropriate.
- Perform code, design, and architecture reviews and provide hardening recommendations.
- Partner with Detection and Response, physical security, engineering, and other stakeholders to improve detection, response, and remediation.
- Mentor and guide Offensive Security team members and serve as a technical advocate and security subject-matter expert.
- Lead security incidents when penetration-testing or red-team findings require them.
- Evangelize findings and projects, publish blog posts, and present at security conferences.
Requirements
- 8+ years of Red Team experience.
- Experience mentoring other team members and communicating technical findings to engineers, executives, and other audiences.
- Experience with threat modeling, black-box red-team exercises, vulnerability research, exploit development, penetration testing, code reviews, and design or architecture reviews.
- Familiarity with DNS, TCP/IP, macOS, Linux, Kubernetes, Docker, AWS, and GCP.
- Knowledge of defensive tools and techniques including IDS/IPS, packet capture, network analysis, antivirus, and EDR, including evasion techniques.
- Deep understanding of the MITRE ATT&CK Framework and strong understanding of access and identity security fundamentals.
- Comfort reading and writing Python, Go, and JavaScript.
- Ability to research and execute testing plans for new technologies or processes and experience working with distributed teams.
- Ability to document technical details and communicate effectively through Slack, JIRA Issues, GitHub issues, and email.
- Financial technology experience and experience serving as a technical lead are bonus qualifications.
Benefits
- Market-competitive compensation with bonus, equity, and benefits eligibility.
- 100% paid employee health insurance and 90% dependent coverage.
- Annual lifestyle wallet for wellness, learning, and development.
- Family-forming and fertility benefits with a lifetime maximum.
- Mental health support for employees and eligible dependents.
- Paid holidays, time off, sick time, and parental leave.
- Catered meals, stocked kitchens, and location-specific commuter benefits.
- Based in the Menlo Park, CA office with in-person attendance expected at least 3 days per week.
Tech Stack
Categories
About Robinhood
Trade. Invest. Earn. rbnhd.co/social_media_disclosures