Threat Emulation Engineer

Make banking a Fifth Third better®
We connect great people to great opportunities. Are you ready to take the next step? Discover a career in banking at Fifth Third Bank.

GENERAL FUNCTION:

As a member of  the Information Security discipline, this role is responsible for assisting in the evaluation and development of systems security across the enterprise with an emphasis on detecting, responding and preventing cyber incidents. This is a hands-on role where the candidate will be involved in scoping relevant attacks against the bank, planning the operation & outcomes, working with trusted advisors & team members to complete the operation, and documenting/communicating observations/findings appropriately. Curiosity, self motivation, and the ability to learn quickly are key to this role because the technologies and landscape continually change. This position requires broad technical expertise, knowledge of security practices, and a hacker growth mindset.

Responsible and accountable for risk by openly exchanging ideas and opinions, elevating concerns, and personally following policies and procedures as defined. Accountable for always doing the right thing for customers and colleagues, and ensures that actions and behaviors drive a positive customer experience. While operating within the Bank’s risk appetite, achieves results by consistently identifying, assessing, managing, monitoring, and reporting risks of all types.

ESSENTIAL DUTIES & RESPONSIBILITIES:

• Responsible for collaborating with team members to complete cyber attack operations.
• Responsible for defining, planning, and documenting new operations and desired outcomes.
• Responsibility for creating and operating infrastructure, services, and applications to achieve the attack operation.
• Responsible for researching new technologies and architectures to determine how to attack weaknesses in a realistic attack chain.
• Clearly communicate research & attack operational items both written and verbally.
• Stay up-to-date and evaluate security trends, evolving threats, risks and vulnerabilities and apply tools to evaluate the risk in the context of the Financial Services sector to mitigate risk.
• Support advances to our detection & response mission.

SUPERVISORY RESPONSIBILITIES: None

MINIMUM KNOWLEDGE, SKILLS, and ABILITIES REQUIRED:

• Bachelor’s Degree in Computer Science, Information Systems, or other related field, or other relevant experience.
• 4 to 6  years of cyber security related experience.
• Strong analytical, tactical and critical thinking ability.
• Ability to handle multiple competing priorities in a fast-paced environment.
• Ability to communicate effectively across multiple levels
• Ability to work independently and in a cross functional team
• The ability to approach a problem with a wide range of solutions that aren’t the obvious answer
• Unremitting curiosity with a desire to find the answer
• Understand basic cloud concepts (especially AWS) and how an attacker may leverage the cloud
• Understand basic networking protocols, how they are used, and how they may be used for the purposes of a Red Team Operation
• Python / C# / Ruby / NodeJS Experience
• The ability to rapidly prototype out solutions and build re-usable tools for the team
• The understanding of how Windows works under the hood (specifically when it comes to Authentication)

Threat Emulation Engineer

Total Base Pay Range 71,100.00 - 145,900.00 USD Annual

At Fifth Third, we understand the importance of recognizing our employees for the role they play in improving the lives of our customers, communities and each other. Our Total Rewards include comprehensive benefits and differentiated compensation offerings to give each employee the opportunity to be their best every day.

The base salary for this position is reflective of the range of salary levels for all roles within this pay grade across the U.S. Individual salaries within this range will vary based on factors such as role, relevant skillset, relevant experience, education and geographic location. In addition to the base salary, this role is eligible to participate in an incentive compensation plan, with any such payment based upon company, line of business and/or individual performance.

Our extensive benefits programs are designed to support the individual needs of our employees and their families, encompassing physical, financial, emotional and social well-being. You can learn more about those programs on our 53.com Careers page at: https://www.53.com/content/fifth-third/en/careers/benefits.html or by consulting with your talent acquisition partner. 

LOCATION -- Virtual, Ohio 00000

Attention search firms and staffing agencies: do not submit unsolicited resumes for this posting.  Fifth Third does not accept resumes from any agency that does not have an active agreement with Fifth Third.  Any unsolicited resumes – no matter how they are submitted – will be considered the property of Fifth Third and Fifth Third will not be responsible for any associated fee.

Fifth Third Bank, National Association is proud to have an engaged and inclusive culture and to promote and ensure equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status.