Senior Red Team Specialist

Your opportunity:

As a Senior Red Team Specialist, you'll work in close collaboration with our Blue Team, emulating real-world threat scenarios to assess and improve our overall security posture. Unlike a traditional penetration tester, your role extends beyond identifying system vulnerabilities. Instead, you'll imitate genuine tactics, techniques, and procedures (TTPs) used by potential threat actors relevant to our operations.

Our environment is as diverse as it is innovative, requiring a creative and adaptive mindset. From our 5G radio networks to our eCommerce platforms and warehouse systems, you'll navigate a range of technologies and environments. Success in our Red Team means adapting traditional attack techniques to fit this diverse landscape while emulating our threat actors.

You'll make impact by:

• Maintain an in-depth understanding of TPG Telecom's offerings, our operations, and potential attack vectors.
• Propose, plan, and execute red teaming operations to emulate realistic threats to our organisation, including threats specific to telecommunication systems.
• Automate attack techniques and create custom tooling for specific operations, fostering a culture of continuous improvement and innovation.
• Write great reports detailing the objectives and outcomes of Red Team operations, including observations and recommendations for improvement.
• Collaborate with our Security Incident Response Team to enhance detection and response capabilities.
• Work closely with our Infrastructure Security Team to propose defensive improvements across our varied environments, including our mobile networks and cloud systems.
• Work alongside non-technical teams to propose enhancements and additions to existing policies and processes.
• Take part in our gamified collaboration exercises.
• Stay informed on current security trends, advisories, publications, and academic research relevant to our organisation and the broader telecommunications industry.

What you’ll bring:

• Experience in cybersecurity roles such as Red Team Specialist, Ethical Hacker, Security Consultant, Penetration Tester, or similar.
• In-depth understanding of the MITRE ATT&CK framework with the ability to utilise threat intelligence to create relevant Red Team scenarios.
• Proficiency in scripting and programming languages like Python, Go, and Ruby to automate tasks and create custom security tools.
• Command-line experience with Linux-based operating systems
• Experience exploiting vulnerabilities in web applications, cloud environments Linux and/or MacOS workstations, and software supply chains.
• Strong understanding of telecommunications systems, including familiarity with RF (Radio Frequency) concepts, wireless network architectures, and mobile communication standards like 4G, and 5G.
• Experience with field-based and hands-on technical tasks within safety regulations.
• Proficiency in a range of security testing tools and methodologies.
• Hands-on experience with at least one of the major cloud providers.
• An adversarial mindset with the ability to think like an attacker.
• Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.

Ideally, you will also have:

Relevant qualifications which are desired but not required are:

• CISSP (Certified Information Systems Security Professional)
• OSEP (Offensive Security Experienced Penetration Tester Certification)
• OSCP (Offensive Security Certified Professional)
• PNPT (Practical Network Penetration Tester)
• eCPPTv2 (eLearnSecurity Certified Professional Penetration Tester)

What's in it for you?

• Flexible hybrid way of working (from home and office)
• ‘Stay Connected Mobile’ - Access to a free mobile plan
• ‘Stay Connected NBN’ - Access to a free, high-speed NBN plan (up to 500 Mbps)
• ‘Your Leave’ - additional leave to be used whenever you like - every year
• Access to TPG Learning Hub platform and internal development opportunities
• Access to Corporate Partner Discounts

Don’t meet every single requirement? That’s OK! At TPG Telecom, we’re all about creating an accessible workplace where everybody feels safe to bring their authentic self to work - regardless of background. If you think this role is a great fit for you but some of the qualifications don’t align with your experience, we still encourage you to apply - you might just be the perfect candidate for a similar role with us! Learn more about life at TPG Telecom here.

TPG Telecom also acknowledges the Gadigal People of the Eora Nation as the Traditional Custodians of lands and waterways where this office can be found in Barangaroo.

Our Talent Acquisition Team and Hiring Managers kindly request no unsolicited resumes or approaches from Recruitment Agencies. TPG Telecom is not responsible for any fees related to unsolicited resumes.

#LI-Hybrid