About the job
Join our dynamic team at Hudson Manpower as a Senior Security Engineer specializing in Workday. We seek a hands-on developer who possesses deep knowledge of HCM modules and can adeptly customize workflows and fine-tune the system. This role places a strong emphasis on Performance Management and Performance Metrics within the Workday environment.
As a key member of our Information Technology department, you will utilize your extensive experience with industry-standard Red Team testing tools (such as Cobalt Strike, Mythic C2, Rubeus, Bloodhound, and Covenant) to safeguard our financial institution against advanced persistent threats without relying on phishing techniques.
Your expertise in Red Team concepts, tools, and automation strategies will be pivotal in defending our infrastructure. A thorough understanding of the MITRE ATT&CK framework, vulnerability measurement, and system hardening for both Windows and Linux environments is essential.
We are looking for someone who can creatively modify payloads to evade detection and has strong skills in at least one scripting language (Python, Ruby, PowerShell, Bash, etc.). Experience with cloud environments (AWS, GCP, Azure) and conducting offensive security exercises against various operating systems is highly desirable.
Successful candidates will have a history of delivering Red Team projects, including the creation and execution of statements of work and risk mitigation strategies while collaborating with stakeholders to remediate findings. Familiarity with automated configuration management tools like Chef and the discovery and exploitation of vulnerabilities in AI systems will be advantageous.
If you hold recognized industry certifications such as GPEN, GXPN, GREM, eCPTX, eCPPT, OSCP, OSWE, CISSP, CPSA, CRT, or similar, we encourage you to apply. Knowledge of industry security standards (TIBER-EU, CBEST, NIST Cyber Security Framework, ISO27002, etc.) is also a plus.
