Senior Offensive Security Engineer

Zionsville, IN, United States

Group 1001 is a consumer-centric, technology-driven family of insurance companies on a mission to deliver outstanding value and operational performance by combining financial strength and stability with deep insurance expertise and a can-do culture. Group1001's culture emphasizes the importance of collaboration, communication, core business focus, risk management, and striving for outcomes. This goal extends to how we hire and onboard our most valuable assets - our employees.

Group 1001, and its affiliated companies, is strongly committed to providing a supportive work environment where employee differences are valued. Diversity is an essential ingredient in making Group 1001 a welcoming place to work and is fundamental in building a high-performance team. Diversity embodies all the differences that make us unique individuals. All employees share the responsibility for maintaining a workplace culture of dignity, respect, understanding and appreciation of individual and group differences.

Job Title: Senior Offensive Security Engineer

Location: USA, Remote

Company: Group 1001

Group 1001 is a consumer-centric, technology-driven family of insurance companies on a mission to deliver outstanding value and operational performance by combining financial strength and stability with deep insurance expertise and a can-do culture. Group1001's culture emphasizes the importance of collaboration, communication, core business focus, risk management, and striving for outcomes. This goal extends to how we hire and onboard our most valuable assets - our employees.

Group 1001, and its affiliated companies, is strongly committed to providing a supportive work environment where employee differences are valued. Diversity is an essential ingredient in making Group 1001 a welcoming place to work and is fundamental in building a high-performance team. Diversity embodies all the differences that make us unique individuals. All employees share the responsibility for maintaining a workplace culture of dignity, respect, understanding and appreciation of individual and group differences.

Job Description:

As the first Red Team Engineer at Group 1001, you will play a pivotal role in advancing the firm's security posture by conducting automated and manual simulated cyber-attacks and offensive security assessments. You will be responsible for the firm's visibility into the effectiveness of our security controls against real adversary tactics, techniques, and procedures. This position requires a blend of technical expertise, creativity, and strategic thinking, and judgement in order to design and conduct realistic tests without disrupting real business operations.

Key Responsibilities:

Perform penetration testing, continuous attack simulations, and red team engagements to evaluate the security defenses of Group 1001's systems and applications.

Develop deep understanding of the organization's technology and business to design 'hunt' or purple team operations

Identify security vulnerabilities and poor architecture; detect existing compromise or malicious behavior.

Collaborate with cross-functional teams to implement security measures that respond to offensive security findings and recommendations.

Develop and maintain comprehensive reports detailing security assessment results and actionable insights.

Stay updated on industry-leading offensive security techniques, tools, and trends in collaboration with the Threat Intelligence pillar to ensure attack modeling prioritizes the most relevant and dangerous adversary behaviors.

Required Qualifications: 7-10+ years of experience in cybersecurity, with a focus on offensive security testing, penetration testing, or red team operations.

Proficiency in security frameworks, controls, and offensive security simulation techniques.

Strong analytical skills with the ability to translate technical insights into strategic recommendations.

Comfort with a wide array of security tools; you should have recommendations on the best tools for this role, but your ability to perform should not be dependent on any specific tool set or architecture.

Excellent communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels.

Relevant certifications such as OSCP (Offensive Security Certified Professional) or CEH (Certified Ethical Hacker) are beneficial.

Compensation:

Our compensation reflects the cost of labor across several U.S. geographic markets. The base pay for this position ranges from $200,000/year in our lowest geographic market up to $270,000/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience.

Benefits Highlights:

Employees who meet benefit eligibility guidelines and work 30 hours or more weekly, have the ability to enroll in Group 1001's benefits package. Employees (and their families) are eligible to participate in the Company's comprehensive health, dental, and vision insurance plan options. Employees are also eligible for Basic and Supplemental Life Insurance, Short and Long-Term Disability, and to enroll in the Company's Employee Assistance Program and other wellness initiatives. Employees may also participate in the Company's 401K plan, with matching contributions by the Company.

#LI-AS1 #LI-REMOTE