Principal, Incident Response Engineer (Red Team)

Full-time - Mid Level

Reston, VA

General Merchandise Retailers

About the position

The Red Team at Walmart is dedicated to enhancing the company's security posture by simulating attacks to identify vulnerabilities and improve defensive capabilities. This role involves executing various security campaigns, developing offensive security tools, and providing consulting to defense teams. The team prioritizes innovation and data security, ensuring a secure operating environment while maintaining the trust of customers and stakeholders.

Responsibilities

• Execute a variety of campaigns (full-scale, assume breach, transparent/collaborative)
• Develop, curate, and leverage offensive security tooling
• Manage and configure campaign infrastructure
• Research and develop attacks on vulnerable systems and defensive tooling (e.g. AntiVirus, EDR, XDR)
• Provide ongoing consulting to defense teams as they design and implement responses to campaign findings

Requirements

• Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 5 years' experience in incident response or related area at a technology, retail, or data-driven company
• 7 years' experience in incident response or related area at a technology, retail, or data-driven company
• Knowledge of fundamental computing concepts
• Subject matter expertise in at least one area relevant to Red Teaming (e.g. Development, Infrastructure, Social Engineering, Reverse Engineering, Threat Intelligence, Cloud Computing, Identity and Access Management)
• A collaborative approach to campaign preparation, execution and debriefing; professional and empathetic communication

Nice-to-haves

• Certifications in Security+, Network+, GISF, GSEC, CISSP, CCSP, or GCIH
• Master's degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or related area and 3 years' experience
• Exposure of leading/working on Information Security/Cyber Security Projects
• Knowledge of accessibility best practices and WCAG 2.2 AA standards

Benefits

• 401(k) match
• Stock purchase plan
• Paid maternity and parental leave
• PTO
• Multiple health plans
• Short-term and long-term disability
• Company discounts
• Military Leave Pay
• Adoption and surrogacy expense reimbursement
• Live Better U education benefit program