Specialist, Cyber Security Operations

Job Classification:

Technology - Information Security

Are you interested in building capabilities that enable the organization with innovation, speed, agility,

scalability

and efficiency? The Global Technology team takes

great pride

in our culture where digital transformation is built into our DNA! When you join our organization at Prudential,

you'll

unlock an exciting and impactful career – all while growing your skills and advancing your profession at one of the world's leading financial services institutions.

Prudential is looking for an Offensive Security Engineer to join our growing Offensive Security program. Prudential's Offensive Security team takes a proactive and adversarial approach to protecting Prudential. The Offensive Security Engineer will use their strong technical skills in application architecture and enterprise infrastructure to assume a hacker mind set and find vulnerabilities before an adversary can. The Offensive Security Engineer is responsible for participating in Prudential's penetration testing, responsible disclosure, and vulnerability validation operations across the global enterprise.  As an influential member of the team, the Offensive Security Engineer will be a primary liaison with the enterprise architecture, security, and technology teams.

What You'll Do

1. perform continuous penetration testing of prudential's infrastructure, web, and mobile applications.
2. write, generate, and collaborate on reports of findings.
3. continuously improve and set up testing infrastructure for use during engagements.
4. present and share findings to various partners (application security, software development, dfir, and dev ops teams), while supporting thoughout the remediation process.
5. regularly research and learn new ttps in public and closed forums.
6. collaborate with teammates to assess prudential's risk, while working with teams to design, implement, and validate controls as necessary to help maintain and advance prudential's security posture.
7. liaise with the security engineering teams to improve tool usage and workflow, as well as with the cyber security operations center to mature monitoring and response capabilities.
8. work with external security researchers through our responsible disclosure program to validate, triage, and orchestrate response and remediation of reported security vulnerabilities.
9. build custom tools as needed during engagements.

basic qualifications

1. bachelors degree in computer science, or equivalent work experience.
2. 3 years of offensive security experience which includes:
   1. web application testing
   2. network testing
   3. cloud testing
   4. mobile testing
3. experience performing security reviews of existing infrastructure and demonstrating vulnerabilities.
4. knowledge of deploying and maintaining red team operational infrastructure.
5. knowledge of adversarial ttps.
6. competent with security tools such as burp suite, metasploit, cobalt strike, kali linux, nessus, powershell empire and autosploit.
7. competent understanding of various operating systems such as windows and linux.
8. understanding of frameworks such owasp wstg, the mitre att&ck, the software development lifecycle (sdlc), etc.
9. strong written and verbal communication skills, specifically in the infosec domain. the work the offensive security team does is highly technical and consumed by many different audiences. being able to bridge the gap and communicate effectively to these audiences will be invaluable and ultimately lead to decreased cyber risk.
10. solid understanding of various network/web protocols (tcp/ip, dns, http(s), web sockets, ldap, etc.) and web stacks.
11. proficiency in one or more programming languages and can both read and understand code written by others.
12. proficient in scripting languages such as python, powershell, bash, and ruby.

preferred qualifications

1. familiarity with exploit development, cloud, or mobile security is a plus.
2. experience with project management tools such as jira, trello, azure devops, or something similar.
3.  knowledge of agile methodologies and experience working in agile environments.
4. experience with developing and using c2 frameworks such as cobalt strike, empire, scythe, and metasploit.
5. in-depth knowledge of evasion techniques, including experience with developing custom payloads and bypassing security controls.
6. participation in and managing bug bounty/responsible disclosure programs.
7. relevant offensive security certifications such as gpen, gwapt, gxpn, oscp, oswe, osep.

note: prudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. the salary range for this role is from $93,200.00 to $138,600.00. specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills. roles may also be eligible for additional compensation and/or benefits. eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance. in addition, employees are eligible for standard benefits package including paid time off, medical, dental and retirement.

prudential financial, inc. of the united states is not affiliated with prudential plc. which is headquartered in the united kingdom.

prudential is a multinational financial services leader with operations in the united states, asia, europe, and latin america. leveraging its heritage of life insurance and asset management expertise, prudential is focused on helping individual and institutional customers grow and protect their wealth. the company's well-known rock symbol is an icon of strength, stability, expertise and innovation that has stood the test of time. prudential's businesses offer a variety of products and services, including life insurance, annuities, retirement-related services, mutual funds, asset management, and real estate services.

we recognize that our strength and success are directly linked to the quality and skills of our diverse associates. we are proud to be a place where talented people who want to make a difference can grow as professionals, leaders, and as individuals. visit

www.prudential.com

to learn more about our values, our history and our brand.

prudential is an equal opportunity employer. all qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity, national origin, genetics, disability, marital status, age, veteran status, domestic partner status , medical condition or any other characteristic protected by law. 

the prudential insurance company of america, newark, nj and its affiliates.

note that this posting is intended for individual applicants. search firms or agencies should email staffing at

staffingagencies@prudential.com

for more information about doing business with prudential.

people with disabilities:If you need an accommodation to complete the application process, which may include an assessment, please email

accommodations.hw@prudential.com

.

Please note that the above email is solely for individuals with disabilities requesting an accommodation.  If you are experiencing a technical issue with your application or an assessment, please email

careers.technicalsupport@prudential.com

to request assistance.