Vulnerability Analyst (Red Team)

Discover. A brighter future.
With us, you'll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it - we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine.
Come build your future, while being the reason millions of people find a brighter financial future with Discover.
Job Description:
At Discover, be part of a culture where diversity, teamwork and collaboration reign. Join a company that is just as employee-focused as it is on its customers and is consistently awarded for both. We're all about people, and our employees are why Discover is a great place to work. Be the reason we help millions of consumers build a brighter financial future and achieve yours along the way with a rewarding career.
As a Vulnerability Analyst (Red Team), you will analyze and assess technologies and build your expertise across the compliance, vulnerability and threat landscape. Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management. Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management.
You will help optimize cybersecurity program processes and output. Vulnerability Analysts (Red Team) at Discover contribute to the broader program roadmap. You will reduce cyber risk by uncovering vulnerabilities and weaknesses in the enterprise cyber environment by conducting covert/overt adversary simulation and emulation. This position works closely with offensive and defensive partner teams to plan, coordinate, execute and report on detection gaps and control weaknesses to improve cyber defense across the enterprise.
The successful candidate for this position will be part of an exciting and dynamic environment to build and deliver industry leading ethical hacking capabilities to continuously protect and defend Discover's brand, systems and data. Offensive Security is part of the Attack Surface Management team and assists with identifying opportunities to reduce Discover's attack surface and overall cybersecurity posture against a broad range of cyber threats and develop strategies to most effectively address the threats.
Responsibilities
• Execute sophisticated adversary simulation activities against Discover to enable identification and mitigation of identified vulnerabilities, attack paths, and weaknesses in detective or responsive controls
• Understand the defensive side, blue team, Security Operations Center (SOC), and security monitoring and response (SIEM, IDS/IPS etc), as well as EDR (e.g. for bypasses), overall monitoring, detection and indicators of compromise, and creating effective red team activities to test these (e.g. developing / using malware, pivoting, escalating privileges, staying stealthy etc)
• Research, develop, maintain and apply offensive tactics, techniques, and procedures (TTPs) in order to effectively mimic the capabilities of relevant threat actors
• Provide subject matter expertise for cyber defenders, remediation teams, and enterprise technology teams
• Build and maintain technical infrastructure to support adversary operations and testing activity
• Automate repetitive pre and post-exploitation activities as applicable
• Documentation of team processes/infrastructure, write reports of attacks/vulnerabilities, and present findings to stakeholders
• Communicate with all stakeholders, internal and external, finding, advising and implementing the best solutions.
Minimum Qualifications
At a minimum, here's what we need from you:
• Bachelors - Computer Science, Information Security, Business or Analytics or related
• 4+ years - Information Security, Cybersecurity, Computer Science, Data Analytics or related
• In lieu of a degree 6+ Years - Information Security, Cybersecurity, Computer Science, Data Analytics or related
Internal applicants only: technical proficiency rating of competent on the Dreyfus cybersecurity scale
Preferred Qualifications
If we had our say, we'd also look for:
• OSCP
• GIAC
• CISSP
• PNPT
• CRTO
External applicants will be required to perform a technical interview.
What are you waiting for? Apply today!
And by the way, while you're waiting to hear from us, don't forget to check out the great benefits Discover offers.
All Discover employees place our customers at the very center of our work. To deliver on our promises to our customers, each of us contribute every day to a culture that values compliance and risk management.
The same way we treat our employees is how we treat all applicants - with respect. Discover Financial Services is an equal opportunity employer (EEO is the law). We thrive on diversity & inclusion. You will be treated fairly throughout our recruiting process and without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other characteristic protected by federal, state, or local law in consideration for a career at Discover.
Application Deadline:
The application window for this position is anticipated to close on May-05-2024. We encourage you to apply as soon as possible. The posting may be available past this date, but it is not guaranteed.
Compensation:
The base pay for this position generally ranges between $88,500.00 to $149,300.00. Additional incentives may be provided as part of a market competitive total compensation package. Factors, such as but not limited to, geographical location, relevant experience, education, and skill level may impact the pay for this position.
Benefits:
We also offer a range of benefits and programs based on eligibility. These benefits include:

• Paid Parental Leave
• Paid Time Off
• 401(k) Plan
• Medical, Dental, Vision, & Health Savings Account
• STD, Life, LTD and AD&D
• Recognition Program
• Education Assistance
• Commuter Benefits
• Family Support Programs
• Employee Stock Purchase Plan

Learn more at mydiscoverbenefits.com .
What are you waiting for? Apply today!
All Discover employees place our customers at the very center of our work. To deliver on our promises to our customers, each of us contribute every day to a culture that values compliance and risk management.
Discover is committed to a diverse and inclusive workplace. Discover is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or other legally protected status. (Know Your Rights & Pay Transparency Nondiscrimination Provision)
Discover complies with federal, state, and local laws applicable to qualified individuals with disabilities and is committed to providing reasonable accommodations. If you require a reasonable accommodation to search for a position, to complete an application, and/or to participate in an interview, please email [email protected] . Any information you provide regarding your accommodation needs will be kept confidential and will only be used to determine and provide necessary accommodation.