Senior Offensive Security Analyst

  • Abbott Laboratories
  • Abbott Park, IL, United States
  • 22 Jul, 2022
Full time

Job Description

Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 113,000 colleagues serve people in more than 160 countries.

About Abbott
Abbott is a global healthcare leader, creating breakthrough science to improve people’s health. We’re always looking towards the future, anticipating changes in medical science and technology. 

The Opportunity 

  • Execute and or support penetration testing against internal and external assets owned by Abbott Laboratories.

  • Penetration testing activities but not limited to; networks, web applications, and cloud assets.

  • Development and maturation of the purple /adversarial emulation team.

  • Develop associated reports related to penetration testing and or purple teaming efforts and findings. Ability to develop and communicate the risk of findings derived from penetration testing activities and or purple teaming efforts.

  • Collaboration with the Incident Response team to support adversarial emulations executed against implemented security controls and or associated processes.

  • Leverage tactical expertise in exploit testing and proof-of-concept development and analysis, to assist with identifying attack vectors that may pose a risk to Abbott’s overall security posture.

  • Collaboration with multiple teams such as Cyber Threat Action Center (CTAC), Threat Intelligence, Threat and Vulnerability Management, Risk and Compliance, and Cybersecurity Architecture. 

  • Conduct and or support internal and external penetration testing efforts against assets owned by Abbott Laboratories.

  • Development and maturation of Offensive Security Operations team.

  • Conduct validation of findings from Attack Surface Management activities.

  • Develop reports and recommendations based on findings from penetration testing and or purple teaming efforts.

  • Execute Purple Team and Adversarial attack emulations.

  • Effectively communicate findings and strategy to stakeholders including technical staff and executive leadership within and outside of the Cybersecurity Operations organization.

  • Lead and assisting with scoping penetration test and or purple team requests.

  • Demonstrate advanced understanding of business processes, Cyber risk management, Cybersecurity penetration testing frameworks, IT controls and related standards e.g. MITRE ATT&CK, NIST 800-171, CIS etc.

  • Development and or maintenance of existing policies, processes related to penetration testing and or purple team responsibilities.

  • Develop comprehensive exploitation strategies that identify exploitable technical or operational vulnerabilities.

  • Understanding of evolving Advance Persistent Threats (APT) and Tactics, Techniques and Procedures (TTPs).

  • Knowledge of endpoint and network defenses and detection methodologies.

  • Understanding of incident response lifecycle.

  • Lead and execute assumed breach exercises.

  • Perpetually develop and strengthen skills, knowledge and functional abilities related to offensive security.

  • Serve as an Offensive Security SME during incident response triage activities.

  • Identify gaps in our understanding of target technology and developing innovative collection approaches.

  • Create comprehensive exploitation strategies that identify exploitable technical or operational vulnerabilities.

EDUCATION AND EXPERIENCE YOU’LL BRING

Hands on experience but not limited to, Kali Linux, Metasploit, Cobalt Strike, Burp Suite, OWASP ZAP, Hack the Box, TryHackMe, VulnHub,

MITRE ATT&CK, Attack Surface Management

Understanding of frameworks such as PTES (Penetration Testing Execution Standard), OWASP (Open Web Application Security Project)

WHAT WE OFFER

At Abbott, you can have a good job that can grow into a great career. We offer:

  • Training and career development, with onboarding programs for new employees and tuition assistance

  • Financial security through competitive compensation, incentives and retirement plans

  • Health care and well-being programs including medical, dental, vision, wellness and occupational health programs

  • Paid time off

  • 401(k) retirement savings with a generous company match

  • The stability of a company with a record of strong financial performance and history of being actively involved in local communities

Learn more about our benefits that add real value to your life to help you live fully:  www.abbottbenefits.com

Follow your career aspirations to Abbott for diverse opportunities with a company that provides the growth and strength to build your future. Abbott is an Equal Opportunity Employer, committed to employee diversity.

Connect with us at www.abbott.com, on Facebook at www.facebook.com/Abbott and on Twitter @AbbottNews and @AbbottGlobal.