BXTI - Red Team Engineer - Cybersecurity, Analyst

Blackstone is the world's largest alternative asset manager. We seek to create positive economic impact and long-term value for our investors, the companies we invest in, and the communities in which we work. We do this by using extraordinary people and flexible capital to help companies solve problems. Our $941 billion in assets under management include investment vehicles focused on private equity, real estate, public debt and equity, infrastructure, life sciences, growth equity, opportunistic, non-investment grade credit, real assets and secondary funds, all on a global basis. Further information is available at www.blackstone.com. Follow @blackstone on LinkedIn, Twitter, and Instagram.

Job Description:

The Red Team provides hands-on expertise for a diverse set of security projects including red teaming, adversary simulation, penetration testing, and threat intelligence.

The analyst supports the Security Operations team with identification, validation, and mitigation of threats and vulnerabilities which effect Blackstone applications and infrastructure.

Responsibilities:
• Perform Red/Purple Team exercises to identify and correct gaps in Blackstone's security program.
• Perform security assessments including internal, external, wireless, and social engineering.
• Present findings and vulnerabilities to technical and non-technical stakeholders.
• Support information security projects by researching, documenting, and assisting with the implementation of security solutions.
• Leverage threat intelligence sources to maintain an understanding of emerging security threats and advanced threat actor capabilities.
• Leverage Blackstone's continuous testing framework to identify, design and deploy tests for security monitoring controls.
• Identify and implement tools to baseline activity and alert or limit suspicious activity and insider threat among networks, databases, data, and users.

Qualifications:
• 1+ years of hands-on technical role in information security
• Demonstrate proficiency in at least one programming or scripting language (Python, C/C++, C#, Bash, PowerShell)
• B.S. in Computer Science or Engineering or similar technical program
• Basic understanding of Active Directory and Cloud Engineering concepts (AWS, Azure, GCP, etc.)
• Strong understanding of security operations concepts such as adversary TTPs, perimeter defense, insider threat, kill-chain analysis, risk assessment and security metrics
• Strong understanding of network protocols
• Strong understanding of application-level protocols
• Ability to self-organize, prioritize activities independently, create documentation and reporting
• Ability to interface with business and technology stakeholders
• Ability to explain complex security concepts to others in a simplified manner

Preferred:
• At least one of the preferred security certifications (or studying): OSCP, GPEN, CRTO, CRTP or related
• Experience with CTF (Capture the Flag) competitions and/or educational platforms such as Hack the Box
• Previous security-related internship or hands-on job experience
• Proven leadership experience
• Familiarity with common security vulnerabilities (for example, web and operating system vulnerabilities)
• Experience in penetration testing skills
• Experience with analyzing data using tools such as Splunk
• Knowledge of virtualization

The duties and responsibilities described here are not exhaustive and additional assignments, duties, or responsibilities may be required of this position. Assignments, duties, and responsibilities may be changed at any time, with or without notice, by Blackstone in its sole discretion.

Expected annual base salary range:

$100,000 - $130,000

Actual base salary within that range will be determined by several components including but not limited to the individual's experience, skills, qualifications and job location. For roles located outside of the US, please disregard the posted salary bands as these roles will follow a separate compensation process based on local market comparables.

Additional compensation: Base salary does not include other forms of compensation or benefits offered in connection with the advertised role.

Blackstone is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, creed, religion, sex, pregnancy, national origin, ancestry, citizenship status, age, marital or partnership status, sexual orientation, gender identity or expression, disability, genetic predisposition, veteran or military status, status as a victim of domestic violence, a sex offense or stalking, or any other class or status in accordance with applicable federal, state and local laws. This policy applies to all terms and conditions of employment, including but not limited to hiring, placement, promotion, termination, transfer, leave of absence, compensation, and training. All Blackstone employees, including but not limited to recruiting personnel and hiring managers, are required to abide by this policy.

If you need a reasonable accommodation to complete your application, please contact Human Resources at 212-583-5000 (US), +44 (0)20 7451 4000 (EMEA) or +852 3656 8600 (APAC).

Depending on the position, you may be required to obtain certain securities licenses if you are in a client facing role and/or if you are engaged in the following:

• Attending client meetings where you are discussing Blackstone products and/or and client questions;
• Marketing Blackstone funds to new or existing clients;
• Supervising or training securities licensed employees;
• Structuring or creating Blackstone funds/products; and
• Advising on marketing plans prepared by a sales team or developing and/or contributing information for marketing materials.

Note: The above list is not the exhaustive list of activities requiring securities licenses and there may be roles that require review on a case-by-case basis. Please speak with your Blackstone Recruiting contact with any questions.

To submit your application please complete the form below. Fields marked with a red asterisk * must be completed to be considered for employment (although some can be answered "prefer not to say"). Failure to provide this information may compromise the follow-up of your application. When you have finished click Submit at the bottom of this form.