Senior Red Teamer Operator

Summary

Join Storyblok, a rapidly growing, award-winning, remote-first headless CMS company, as a Security Engineer. You will contribute to various security-related tasks, including penetration testing, vulnerability handling, and security assessments across our infrastructure and applications. This role involves collaborating with stakeholders, developing automated testing systems, and staying current with the latest security threats and best practices. Storyblok offers a comprehensive benefits package, including a remote work stipend, home office equipment, generous paid time off, a personal development fund, and an annual international team-building trip. We are a diverse and inclusive company committed to work-life balance and flexible schedules.

Requirements

• Experience with large-scale applications on Amazon AWS
• Experience with Linux, networking protocols, general utilities, and shell scripts
• Fluency in scripting languages like Bash, Ruby, or Python
• Experience with Cloud-native solutions
• Excellent knowledge of offensive security frameworks
• Experience with industry-recognized security testing standards, penetration testing methodology, and attack simulation tools
• Ability to conduct research and development and solve technical problems independently
• Be a team player with good communication and interpersonal skills
• Excellent communication skills

Responsibilities

• Monitor for incoming vulnerability reports, test for viability, categorize findings, and ensure they are fixed or mitigated
• Execute threat-led penetration testing and red/purple team exercises using frameworks like MITRE ATT&CK and TIBER-EU
• Set up and maintain automated testing systems to continuously monitor Storyblok's security posture
• Assist with performing social engineering assessments (email phishing, vishing, physical access attacks) to simulate theft of passwords, infiltrate systems, and download malware/ransomware to assess security awareness
• Perform penetration tests on Storyblok assets, such as external and internal infrastructures and web applications, to identify security weaknesses and misconfigurations
• Perform security configuration assessments for cloud, network, servers, and endpoints
• Prepare reports and present on vulnerabilities and exploitation techniques
• Coach and develop team members through sharing of experience and knowledge
• Keep up to date with the latest penetration testing techniques and the current threat landscape
• Maintain knowledge about current security standards, systems, and authentication protocols
• Provide awareness about potential threats and cybersecurity best practices

Preferred Qualifications

Working experience related to the execution of red/purple team exercises and/or penetration testing of web and mobile applications, internal and external infrastructure, execution of social engineering assessments

Benefits

• Monthly remote work stipend (home internet costs, electricity)
• Home office equipment package right at the start (laptop, keyboard, monitor…)
• Home office equipment upgrade (furniture, ear plugs…) or membership to a local co-working space after your onboarding
• Sick leave benefit, parental leave, and 25 days of annual leave plus your local national holidays
• Personal development fund for courses, books, conferences, and material
• VSOP (Virtual Stock Option Plan)
• The annual international team-building trip, quarterly and monthly online get-togethers
• As a fully remote company, with work-life balance at its core, you’ll enjoy flexible schedules
• An international team that loves to have fun at work and works hard together to accomplish shared goals