Red Team Director - EA Security

Job Description

Red Team Director - EA Security

EA Security

The EA Security team protects EA by reducing our exposure to security risks by raising awareness and providing a measured, proportionate set of security and risk management controls, services and solutions.

The Red Team Director is a technical leadership role for the team that plays a part in finding the biggest threats to EA's security, making EA a secure place to work for our 20,000+ people across 38+ global sites. In addition to 'classic' Red Team activities and pen testing, you will help build an application security program that scales enterprise-wide with a focus on automation and best-practices. We're a Red Team that can find the worst of the worst, knows what's most likely to be attractive to attackers, and we're driven to make things better.

You will report to the Vice President of the Enterprise Security Team and you will have direct access to leaders across the security team, IT, production and the studios. You will help set EA's Enterprise security strategy, and you'll be an ally to all our partners.

Primary Responsibilities
• Respond to latest threats such as APT and other forms of targeted attacks, organized crime, and hacktivism.
• Conduct attacks on internally or externally hosted applications and infrastructure.
• Design scripts, frameworks, tools for automating application security assessments.
• Active participation in attack analysis responsibilities as part of security incident response.
• Assemble and coordinate with the Incident Response and other teams at EA to resolve security incidents.
• Communicate status of missions and Red Team activity to EA Security and studio leadership.
• Stay current on attack techniques and understand published and new real-life attack scenarios.
• Mentor more junior staff in attack techniques, tool development, and adversarial tactics.
• Tailor engagements and discussions for different types of businesses, leaders, and vendors.

Skills
• Minimum experience of 8+ years in Security with Red Team management
• Be an attractor of and develop remarkable technical talent
• Build connections across the business and through these relationships increase EA's defensibility.
• Build successful security programs from the ground up
• Plan quarterly roadmaps, make hard trade-offs and communicate them well
• Build and deploy flexible automation frameworks
• Experience in at least 3 of the following (and knowledge of remainder):
• Metasploit, Cobalt Strike, BURP, Bloodhound
• Web and Database Penetration Testing
• Network (protocols, traffic analysis, wireless, etc.);
• Operating System security (Linux, Mac, Windows);
• Application Analysis (fuzzing, static analysis, app scanning)

Jobcode: Reference SBJ-r1ykmy-3-147-42-168-42 in your application.