Red Team Lead

About Exness

Exness is a multi-asset broker with an international team of approximately 1,800 people, a third of whom work in the Technology, Data and Security offices. Our goal in Exness is to develop exceptional products that will help experienced traders to trade various assets with better-than-market conditions.

Since our founding in 2008, we work with the firm belief that trading can - and should - be ethical. And so we developed proprietary algorithms and services to give our clients the most effective trading tools and conditions in the industry. Ambitious business goals balanced by genuine care for our customers and a healthy level of technical perfectionism define our model. And thanks to this approach, in 2022, our monthly trading volume reached $2.7 trillion, and the number of active users exceeded 320,000 people worldwide.

Our chosen path encourages employees to deepen their technical expertise, rely on scientific methods, and seek innovative solutions. We work on a modern stack without having to deal with excess legacy, and our architecture stands on k8s, PostgreSQL, Redis, Kafka, REST or gRPC as an alternative. We use the GitOps through Gitlab CI approach and cover everything with automated integration testing. Some of our teams' favorites are ClickHouse, MongoDB, React, and Flink.

Our clusters are automatically managed through the code and can handle thousands of events per second. We use Kafka to decentralize our service, and the main languages our tech team uses are Python and Go while in the Trading Core, we also use C++ and C#.

For the front-end, we use React, and most of the projects are TypeScript SPAs using technologies such as Web-sockets, Service Worker, PWA, Web-push, AB-testing, and Webpack Federation.

The people we’ve brought together come from many different countries with vast experience from leading IT companies. Although some of them work remotely, our main development office is located in Limassol, Cyprus. Any colleague who wants to relocate to Cyprus, whether alone or with family, will be provided with exceptional support, including a corporate MINI Countryman and financial allowance for private schools and kindergartens.

Our teams are constantly expanding and we’re always seeking the best talent to join us in providing the best possible trading experience to our clients. So check out the many exciting vacancies we have on our career website.

Position

We are looking for a Red Team Lead to join Exness Information Security Department. You will identify existing and emerging security threats and protect Exness Group of Companies from them, maintaining business continuity and regulatory compliance in respective areas.

You will:

• Design, scope, and lead Red Team Group for conducting various security assessments in multiple domains; Physical, Cyber, Social Engineering, Insider Threat
• Techniques and tradecraft used during engagements include commercial, open-source, and custom tooling 
• Collect, categorize, maintain, and analyze data using a range of quantitative techniques
• Supervise staff, provide feedback and coaching, and grow their technical and consulting skills
• Automate the creation of Tactics, Techniques, and Procedures, portions of engagements, and other offensive security work to inform and drive our engagements
• Work with Incident Response, Product Security, and other security partners to align remediation efforts that best protect the company

Your qualification

• At least five years experience in offensive cybersecurity roles, such as malware development, red teaming, penetration testing, purple team exercises in the cloud and on-prem environments
• Experience with the commonly used attack frameworks (Cobalt Strike, Metasploit, CANVAS, Empire, Core Impact, etc.)
• Strong scripting abilities using PowerShell, python, ruby, and/or programming with compiled languages (C/C++, Golang, etc.)
• The ability to think like a defender (control evasion) 
• Experienced in exploiting application layer vulnerabilities and creating and/or customizing exploits Ability to develop and/or customize exploits in order to penetrate a network
• Professional level certification such as OSCP, OSEP, OSWE
• CTF/Bugbounty experience
• Excellent attention to detail oral and written communications skills tailored to audiences ranging from technical subject matter expert partners to senior executive stakeholders 
• Deep understanding of security aspects of virtualization, containerization, and cloud services (AWS)
• Broad-spectrum of technical knowledge in the following areas (the list is not exhaustive): Linux family, Docker, Kubernetes, AWS, Azure
• Good knowledge of basic technologies and protocols (TLS, HTTP, Web Socket, DNS, OAuth2, OIDC, etc.) and threats to them
• Fluent Russian and English language (Upper-Intermediate or higher)

Will be a plus

• Project management experience
• Experience building infrastructure using DevOps technologies and concepts to support offensive security teams 
• Digital forensics experience 
• Team management skills are a plus

What we offer

• A reasonably estimated and attractive package (competitive salary based on your expectations and internal benchmark) with the ability to start working remotely anywhere in the world
• Company Car - the company will provide Exness-branded cars to those who relocated, parking near the office or a bus tickets
• We’ll pay school or kindergarten fees (Annual Registration or Tuition Fees, Regular term fees, Half day service to kindergartens) for your children between 0 years - 18 years, up to three (3) children
• L&D - support your need to replenish your knowledge and acquire new skills to do your job better via Continuous product education, Professional training & Certifications, Soft skill training, Language classes, and our very own Exness library
• Sports Benefits - Our very own Sports Club with dedicated coaches doing group and individual training, on-site and online, sharing healthy recipes and life hacks + Free Sanctum Club Membership for you and your spouse. Jet Skis (if you have a speed boat operator license)
• Medical - Besides having a Corporate Doctor, we cooperate with one of the biggest international insurance companies to provide medical insurance for you and your families. Coverage is provided for you, your spouse, and your children up to 18 years old. It includes Inpatient, Outpatient, and international support

Additional details

Relocation to CY Package

• Medical tests, COVID-19 tests, apostille, express delivery
• Taxi or public transport to airport of departure
• One way air tickets for employees and family members
• Expenses in case of luggage overweight up to 200 euros per family
• Pets’ transportation (not more than 2)