Fraud Red Team Manager

Come join one of the most dynamic cyber security teams in the industry! Intuit is looking for a highly experienced security leader to lead Intuit's Fraud Red Team. You will leverage your considerable experience against one of the largest SaaS cloud deployments in the world, addressing complex security vulnerabilities, keeping our millions of customers safe from adversaries, and performing the best work of your life!

Responsibilities

Plan and guide campaigns and research activities related to in-depth fraud red team assessments against Intuit-owned targets, in order to identify and quantify risks.

Drive the creation of high quality reports to enable stakeholder understanding of findings

Drive the remediation of findings through stakeholder briefings and educational initiatives

Design security strategies, metrics, and reporting mechanisms

Assess risk when business decisions are made, demonstrating particular consideration for the reputation and safeguarding clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Shape requirements for business logic exploitation, exploit code, exploit tooling, and threat intelligence needs by the Fraud Red Team

Drive and maintain training requirements for Intuits Fraud Red Team

Be a mentor to team members, sharing your tradecraft and guidance

Qualifications

6+ years in a cyber security or fraud security role, including at least 4 years of experience in offensive security or related field

4+ years of management experience in a cyber security role

Experience in developing Fraud Red Team campaigns, pen test engagements, or planning related to offensive security

Extensive knowledge of Fraud Red Team and offensive security methodologies and TTPs

Experience in developing requirements for offensive security tooling

Extensive knowledge of Burp Suite.

Strong collaboration, communication, and cross-organizational influence skills.

A creative mindset and willingness to challenge conventional assumptions.

Ability to start and drive work independently.

Experience with web exploitation

Experience testing new and existing fraud controls to determine their effectiveness and identify opportunities to strengthen detection and prevention.

Proficiency with enterprise operating systems, including Linux and Windows

Knowledge of Python, or similar scripting language

Proven ability to have multiple projects and deadlines simultaneously

Ability to identify and evaluate risk to IT systems and communicate risks to management

Executive and engineer level briefing skills

Ability to understand complex product architectures and work effectively with Product, Trust and Safety, and Security teams

Strong communication and documentation skills with the ability to translate technical findings into clear risks and actionable recommendations

Strong judgment and commitment to conducting adversarial testing safely, responsibly, and within established authorization and testing boundaries

Prefered Skills/Experience:

Banking/Money movement security

MS in Computer Science, Cybersecurity, or related field

Professional level certifications related to Fraud Red Teaming (OSCP, GPEN, GWAPT, etc)

Program Management Experience

Fintech and/or Finrisk experience

Intuit provides a competitive compensation package with a strong pay for performance rewards approach. This position may be eligible for a cash bonus, equity rewards and benefits, in accordance with our applicable plans and programs (see more about our compensation and benefits at Intuit®: Careers | Benefits). Pay offered is based on factors such as job-related knowledge, skills, experience, and work location. To drive ongoing fair pay for employees, Intuit conducts regular comparisons across categories of ethnicity and gender.