Job Details:

Cyber Security Incident Response Analyst for Equifax Inc. in Alpharetta, GA, to deploying cyber security threat emulation tests and simulating real-world attacks (named “engagements”) in order to identify vulnerabilities and weaknesses within the organization’s network, systems, and applications, and secure the company's posture against malicious threat actors. Plan out detailed step by step of technical commands to be executed on each particular attack phase. Supporting a global program by emulating real-world threats using tactics, techniques, and procedures with the goals of training and measuring the effectiveness of people, processes, and technology used to defend an environment. Develop testing software (malware) and other required customized tools that evade current defense mechanisms in the company. Protecting the infrastructure from cyber threats by implementing and maintaining security measures. Penetration Testing: method used to evaluate the security of a system network or application by the use of developing customized software, multiple tools, exploiting vulnerabilities, documenting every finding and providing it to management and other stakeholders. Developing strong relationships within Security and with Technology globally in order to successfully execute the Red Team’s mission and help defenders secure all applications, software and systems. Build virtual servers with customized software such as Cobalt Strike. Set up network configurations across the board.
 
Requires: 

Bachelor's degree in Computer Science, Information Technology, or related field (willing to accept foreign education equivalent) plus five (5) years of experience as a Cyber Security Analyst or related occupation with experience in planning and executing cyber attack tests or, alternatively, a Master's degree in Computer Science, Information Technology, or related field (willing to accept foreign education equivalent) and three (3) years of experience as a Cyber Security Analyst or related occupation with experience in planning and executing cyber attack tests. Specific skills/other requirements - Must also possess the following (quantitative experience requirements not applicable to this section): Advanced Penetration Testing: exploit vulnerabilities in networks, systems, applications, and corporate environments such as Active Directory, and experience with tools such as Nmap, BurpSuite, Metasploit, Gobuster, or Nuclei, as well as Windows manipulation tools like Impacket, Mimikatz, or Win-PEAS; Malware Development: create custom malware tools that can bypass standard detection mechanisms, including knowledge of malicious code development with tools such as Visual Studio, including languages like Rust, Go, Python, C#, C++, C; Threat Emulation, Planning and Strategy: advanced design of attack scenarios that involve threat actors’ attack chain, including all their operations (reconnaissance, forensics methods, exploitation) following the Mitre ATT&CK framework, as well as adaptation of existing breach attacks into the corporate reality and assets present in the environment; Opsec and Evasion Techniques: encryption, anti-forensics methods, obfuscation of malware, log manipulation, in-memory evasion via tooling such as Arsenal Kit, Scarecrow systems; Customization of Frameworks adapting to different target scenarios, using Cobalt Strike’s malleable C2 profiles for network communication; Sliver session and beacon profiles for static detection evasion and command additions; and Metasploit encryption of payloads; and Cloud based exploitation in environments such as AWS, GCP, Azure, and Active Directory in cloud systems; misconfiguration detection and automated discovery of exposed data via API testing; bucket analysis, including knowledge in IP, TCP, and UDP protocols.

How to Apply:

Email resume to jobs.opportunities@equifax.com. Reference Position Number: 00597