Senior Product Manager
UpGuard
Cyber Security
Senior Consultant, Advisory Services, Purple Teams
Security Risk Advisors
full-time
Posted on:
Origin: • 🇺🇸 United States • Pennsylvania
Visit company websiteJob Level
Senior
Tech Stack
Cyber Security
About the role
- SRA’s mission to level up every day to protect our clients and their customers; culture of support and belonging; It’s Personal; transparent career pathing, varied DEI programming and community groups, competitive benefits including mental health support, and an emphasis on a sustainable, healthy, and engaging work culture. SRA has twice been named a Best Place to Work by the Philadelphia Business Journal.
- This role is part of SRA's Advisory Services team, with a focus on Purple Teams. The Senior Consultant will be responsible for leading and executing advanced purple team testing programs for Fortune 1000 companies. This role requires expertise in using the VECTR platform for managing and reporting on these exercises. The ideal candidate will have a strong background in cybersecurity, penetration testing, and incident response.
Requirements
- Lead Purple Team Exercises: Plan, execute, and manage purple team exercises to evaluate the effectiveness of security controls and improve the organization's defensive capabilities.
- VECTR Operations: Use the VECTR platform to document, track, and report on purple team activities. Ensure the platform is updated and maintained to reflect the latest testing methodologies and results.
- Test Preparation and Execution: Oversee the preparation, execution, and reporting of purple test cases. Ensure all activities are documented and outcomes are communicated effectively.
- Metrics and Reporting: Develop and track metrics for measuring test outcomes, including defense success metrics and trending over time to demonstrate improvements. Draft actionable observations and recommendations specific to client environments.
- Collaboration: Work closely with internal SRA teams, including Red and Blue, to integrate findings from purple team exercises into continuous improvement processes for each client.
- Client Interaction: Engage with clients to understand their security needs, provide insight into their tooling, and deliver top-tier customer service. Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel.
- Training and Development: Provide training and guidance to team members on purple team methodologies and the use of VECTR.
- Research and Innovation: Use knowledge gained during purple team exercises to conduct research initiatives with the purpose of improving our services and giving back to the community.
