Fraud Red Team Manager

Overview Come join one of the most dynamic cyber security teams in the industry! Intuit is looking for a highly experienced security leader to lead Intuit's Fraud Red Team. You will leverage your considerable experience against one of the largest SaaS cloud deployments in the world, addressing complex security vulnerabilities, keeping our millions of customers safe from adversaries, and performing the best work of your life! Responsibilities Plan and guide campaigns and research activities related to in-depth fraud red team assessments against Intuit-owned targets, in order to identify and quantify risks. Drive the creation of high quality reports to enable stakeholder understanding of findings Drive the remediation of findings through stakeholder briefings and educational initiatives Design security strategies, metrics, and reporting mechanisms Assess risk when business decisions are made, demonstrating particular consideration for the reputation and safeguarding clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency. Shape requirements for business logic exploitation, exploit code, exploit tooling, and threat intelligence needs by the Fraud Red Team Drive and maintain training requirements for Intuits Fraud Red Team Be a mentor to team members, sharing your tradecraft and guidance Qualifications 6+ years in a cyber security or fraud security role, including at least 4 years of experience in offensive security or related field 4+ years of management experience in a cyber security role Experience in developing Fraud Red Team campaigns, pen test engagements, or planning related to offensive security Extensive knowledge of Fraud Red Team and offensive security methodologies and TTPs Experience in developing requirements for offensive security tooling Extensive knowledge of Burp Suite. Strong collaboration, communication, and cross-organizational influence skills. A creative mindset and willingness to challenge conventional assumptions. Ability to start and drive work independently. Experience with web exploitation Experience testing new and existing fraud controls to determine their effectiveness and identify opportunities to strengthen detection and prevention. Proficiency with enterprise operating systems, including Linux and Windows Knowledge of Python, or similar scripting language Proven ability to have multiple projects and deadlines simultaneously Ability to identify and evaluate risk to IT systems and communicate risks to management Executive and engineer level briefing skills Ability to understand complex product architectures and work effectively with Product, Trust and Safety, and Security teams Strong communication and documentation skills with the ability to translate technical findings into clear risks and actionable recommendations Strong judgment and commitment to conducting adversarial testing safely, responsibly, and within established authorization and testing boundaries Prefered Skills/Experience: Banking/Money movement security MS in Computer Science, Cybersecurity, or related field Professional level certifications related to Fraud Red Teaming (OSCP, GPEN, GWAPT, etc) Program Management Experience Fintech and/or Finrisk experience Intuit provides a competitive compensation package with a strong pay for performance rewards approach. This position may be eligible for a cash bonus, equity rewards and benefits, in accordance with our applicable plans and programs (see more about our compensation and benefits at Intuit®: Careers | Benefits). Pay offered is based on factors such as job-related knowledge, skills, experience, and work location. To drive ongoing fair pay for employees, Intuit conducts regular comparisons across categories of ethnicity and gender.