Offensive Security Senior Architect

⁠⁠⁠⁠⁠⁠Manage Pen Testing Engagements  – Ability to coordinate with internal teams, applications owners, and 3rd party vendors for various pen testing engagements

Manage Bug Bounty  – Ability to manage various aspects of a bug bounty program, including but not limited to engaging with submissions and responses, testing/retesting and partnering with business lines and vendors

Policy and Procedures  – Assist in policy and process development for the Offensive Security Team amongst various teams and disciplines (cyber threat intelligence, threat hunting, adversary emulation)

Conduct Threat Assessments and Threat Research:  Explore various technologies and solutions to understand information security risks and weaknesses. Perform threat research on various industry threats, vulnerabilities, and attack vectors to understand potential weaknesses in security defenses and where security mitigations need to be enhanced.

Threat Modeling:  Conduct threat modeling assessments to understand most relevant threats to Caesars

Lead cross-team educational sessions and training:  Lead sessions across internal security teams and across the entire company that detail relevant threats and information that business professionals need to understand as the threat landscape evolves

Collaboration: Collaborate closely with IT and Security teams to understand the current security architecture and help develop strategies to mitigate identified risks. Conduct Purple Team exercises with the SOC to test, validate, and improve the effectiveness of existing security controls.

Compliance:  Ensure that penetration testing activities adhere to relevant compliance standards and regulations, including those specific to the casino industry such as PCI-DSS and other gaming regulations.

Continuous Improvement:  Stay current with the latest security trends, techniques, and vulnerabilities, and apply this knowledge to continuously improve the security posture of the firm.

Training and Awareness:  Provide guidance and training to internal teams on security best practices and how to address identified vulnerabilities.