Security Engineer (Red Team)

Xcel Energy • Minneapolis, MN

2d

About The Position

Are you looking for an exciting job where you can put your skills and talents to work at a company you can feel proud to be a part of? Do you want a workplace that will challenge you and offer you opportunities to learn and grow? A position at Xcel Energy could be just what you’re looking for. Position Summary As a Red Team member, you will perform authorized testing to expose weaknesses in our security that could be exploited by attackers. Your work will involve planning and executing tests, documenting methodologies, and creating detailed reports based on the test findings. Ideal candidates having familiar experience testing environments including: Networks and Infrastructures Windows and Linux operating systems Embedded Computer Systems Web/Mobile Applications Cloud Environments Physical Security Testing This position works closely with key business partners, internal technology teams and external vendors to detect future trends and ongoing activity, and to provide oversight and governance to projects and changes within the environment to ensure consistent implementation and effectiveness of security technology and controls. Participate in and contribute to other areas within the department as needed, and develop, maintain & implement processes for security for all platforms and ensures compliance with requirements from agencies such as FERC, NERC, and Department of Homeland Security (such as CIP, HIPAA, SOX, PCI).

Requirements

• Bachelor's degree with a concentration in computer science, technology, accounting or business or equivalent combination of education and experience.
• Minimum of 5 years experience in IT, including 3 years direct experience in IT engineering and cyber security.
• Demonstrated verbal/written communication and presentation skills.
• Demonstrated leadership skills.
• Proven problem solving and business risk analysis skills.
• Ability to excel in a team environment.
• Strong investigative, conflict resolution and negotiation skills.
• Must possess a broad knowledge relating to IT infrastructures and have in-depth and up-to-date experience with multiple operating systems and desk side integration.

Nice To Haves

• Knowledge and experience with cloud penetration testing/red teaming.
• Experience using the following tools - Metasploit, BURPSuite, impacket, Hashcat, Rubeus, nmap, aircrackng, mimikatz.

Responsibilities

• Perform Red Team testing and reporting. Consult on penetration test report findings, security solutions, and technologies. Work with business unit executives and service providers to introduce required Cyber Security solutions into the environment.
• Maintain and develop professional skills and knowledge of relevant TTP’s, exploits, and tools associated with penetration testing, red team activities and technology trends.
• Help with development of team members, documentation, processes, and business relationships.
• Develop and maintain a working relationship with 3rd Party service providers. Provide planning, coordination, and support for 3rd party penetration tests.
• Provide recommendations and support stakeholders on cyber security issues and requirements.
• Provide all assigned responsibilities as part of an on-call rotation.

Benefits

• Annual Incentive Program
• Medical/Pharmacy Plan
• Dental
• Vision
• Life Insurance
• Dependent Care Reimbursement Account
• Health Care Reimbursement Account
• Health Savings Account (HSA) (if enrolled in eligible health plan)
• Limited-Purpose FSA (if enrolled in eligible health plan and HSA)
• Transportation Reimbursement Account
• Short-term disability (STD)
• Long-term disability (LTD)
• Employee Assistance Program (EAP)
• Fitness Center Reimbursement (if enrolled in eligible health plan)
• Tuition reimbursement
• Transit programs
• Employee recognition program
• Pension
• 401(k) plan
• Paid time off (PTO)
• Holidays
• Volunteer Paid Time Off (VPTO)
• Parental Leave Benefit

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level