Site Name: Poznan Business Garden Posted Date: Dec 20 2024 GSK is a global biopharma company with a special purpose – to unite science, technology and talent to get ahead of disease together – so we can positively impact the health of billions of people and deliver stronger, more sustainable shareholder returns – as an organisation where people can thrive. Getting ahead means preventing disease as well as treating it, and we aim to impact the health of 2.5 billion people around the world in the next 10 years. As a Red Team Operator - you will have a deep understanding of computer sci ence and information security. You understand advanced concepts like exploit development and stealthy operations. This role will have access to a very diverse network at a company dedicated to providing care to patients across the globe. This role will provide YOU the opportunity to lead key activities to progress YOUR career. Red Team Operator Key Responsibilities: Leverage real attacker emulation to simulate security incidents, observe response across monitoring and incidents, and identify enhancement opportunities Develop after action reports to help justify this investment and use the results to hone the security posture for the overall organization Execute Red Team engagements in a variety of networks using real-world adversarial Tactics, Techniques, and Procedures (TTPs) from conception to report delivery Conduct open-source intelligence gathering, network vulnerability scanning, exploitation of vulnerable services, lateral movement, install persistence in a target network(s), and manage C2 infrastructure Develop payloads, scripts and tools that weaponize new proof-of-concepts for exploitation, evasion, and lateral movement Document identified vulnerabilities and research corrective/remediation actions in order to recommend a risk mitigation technique(s) Maintain knowledge of applicable Red Team policies, Standing Ground Rules, regulations, and compliance documents Communicate effectively with team members and during an engagement Keep current with TTPs and the latest offensive security techniques Why You? Basic Qualifications: 1 year or less of experience as a red team operator or 2 years of pen testing experience Experience with offensive tools and platforms such as Kali Linux, Cobalt Strike, Metasploit, Covenant, Sliver, Bloodhound, Ghostpack, Nmap, Nessus, Zmap, Massscan, EyeWitness, Burp Suite Knowledge of functionality and capabilities of network defense technologies, including firewalls, IDS and IPS, antivirus, and web content filtering Experience building red team infrastructure and new approaches to testing a variety of environments Ability to operate and lead organized security testing engagements without assistance Preferred Qualifications (nice to have but not a must): Familiarity with various programming languages such as Python, Ruby, and Rails are a plus Experience in web programming (Java, ASP, ASP.NET, HTML, JavaScript) Experience with cloud-based environments (GCP, Azure, AWS, etc.) Market relevant certifications such as CREST/OSCP/OSCE/OSWP a plus Demonstrated rapid tool development & automation experience Regular Expressions (RegEx) Knowledge of SQL Server, SQL Client Tools, and T-SQL Stored Procedures Understanding of Web Application Firewalls Reverse engineering Why GSK? Career at one of the leading global healthcare companies Contract of employment Attractive reward package (annual bonus & awards for outstanding performance, recognition awards for additional achievements and engagement, holiday benefit) Life insurance and pension plan Private medical package with additional preventive healthcare services for employees and their eligible Sports cards (Multisport) Possibilities of development within the role and company’s structure Personalized learning approach (mentoring, online training’ platforms: Pluralsight, Business Skills, Harvard Manage Mentor, Skillsoft and external training) Extensive support of work life balance (flexible working solutions, short Fridays option, health & well-being activities) Supportive community and integration events Modern office with creative rooms, fresh fruits everyday Free car and bike parking, locker rooms and showers. Inclusion & Diversity at GSK: Inclusion and diversity at GSK are key for our success. Here, you will thrive through bringing your unique experiences to both our company and the recruitment process. We want you to be you, feel good and keep growing your career. GSK is an Equal Opportunity and Affirmative Action Employer. Applicants will travel through a transparent recruitment journey that adheres to all required employment standards and regulations. Beyond this, we commit to our values of integrity and respect towards every applicant. We want to hear from you and support with any adjustments that you may require during the recruitment process. Please get in touch with our Recruitment Team (pl.recruitment-adjustments@gsk.com) to further discuss this today. #LI-Hybrid #LI-DEI #LI-GSK Why GSK? Uniting science, technology and talent to get ahead of disease together. GSK is a global biopharma company with a special purpose – to unite science, technology and talent to get ahead of disease together – so we can positively impact the health of billions of people and deliver stronger, more sustainable shareholder returns – as an organisation where people can thrive. We prevent and treat disease with vaccines, specialty and general medicines. We focus on the science of the immune system and the use of new platform and data technologies, investing in four core therapeutic areas (infectious diseases, HIV, respiratory/ immunology and oncology). Our success absolutely depends on our people. While getting ahead of disease together is about our ambition for patients and shareholders, it’s also about making GSK a place where people can thrive. We want GSK to be a place where people feel inspired, encouraged and challenged to be the best they can be. A place where they can be themselves – feeling welcome, valued, and included. Where they can keep growing and look after their wellbeing. So, if you share our ambition, join us at this exciting moment in our journey to get Ahead Together. GSK is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive equal consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orientation, gender identity/expression, age, disability, genetic information, military service, covered/protected veteran status or any other federal, state or local protected class. Important notice to Employment businesses/ Agencies GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site. Please note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, GSK may be required to capture and report expenses GSK incurs, on your behalf, in the event you are afforded an interview for employment. This capture of applicable transfers of value is necessary to ensure GSK’s compliance to all federal and state US Transparency requirements. For more information, please visit GSK’s Transparency Reporting For the Record site.