About The Company

Interactive Brokers Group, Inc. (NASDAQ: IBKR), a member of the S&P 500, is a global financial services company headquartered in Greenwich, Connecticut, with offices in over 15 countries. Through its affiliates, Interactive Brokers provides automated trade execution and custody of securities, commodities, foreign exchange, and prediction markets on over 170 markets in numerous countries and currencies.

For more than four decades, Interactive Brokers has focused on technology, automation, and innovation to provide clients worldwide with a sophisticated, unified platform to manage their investment portfolios. We serve individual investors, hedge funds, proprietary trading groups, financial advisors, and introducing brokers.

Our culture is driven by problem-solving, efficiency, and continuous improvement. We look for individuals who are intellectually curious, collaborative, and motivated to contribute to technology that helps simplify and enhance access to global financial markets. Interactive Brokers has consistently been recognized as a top broker by respected industry sources including Barron's, Investopedia, Stockbrokers.com, and others.

About The Role

We are seeking a skilled cybersecurity professional to join our team in a dual role focused on Phishing Simulation and Red Team Breach Attack Simulation (BAS). This position requires expertise in both conducting phishing campaigns and operating BAS tools to simulate various attack scenarios beyond phishing. The role is critical for assessing and improving our organization's security posture against multiple threat vectors.

Key Responsibilities

Phishing Simulation

Design, develop, and execute sophisticated phishing simulation campaigns tailored to organizational needs
Create and manage the technical infrastructure required for phishing simulations, including domains and servers
Develop realistic phishing email content and landing pages that reflect current threat actor tactics
Generate comprehensive phishing reports with metrics, findings, and recommendations
Track user susceptibility to phishing attempts and measure improvement over time
Collaborate with security awareness teams to develop targeted training based on simulation results

Breach Attack Simulation (BAS)

Configure and operate BAS tools to simulate various attack scenarios beyond phishing (e.g. ransomware, lateral movement, data exfiltration)
Design realistic red team scenarios to test security controls across the organization
Troubleshoot technical issues with BAS tools and ensure proper execution of attack scenarios and that log events are being raised and ingested
Analyze BAS results to identify security gaps and control weaknesses
Provide recommendations for security improvements based on BAS findings
Stay current with emerging attack techniques and implement them in simulation scenarios
Document and maintain BAS procedures and playbooks

General

Collaborate with security teams to prioritize remediation efforts based on simulation findings
Contribute to the development of security policies and procedures
Maintain knowledge of current cybersecurity threats and attack methodologies
Participate in security assessment activities as needed

Technical Requirements

Strong understanding of domain and server setup for phishing operations, including technical components such as:
DNS configuration (A records, MX records, CNAME)
Email authentication protocols (SPF, DKIM, DMARC)
Web server configuration and management
SSL/TLS certificate implementation
Solid networking knowledge including:
TCP/IP protocols
Network architecture
Firewalls and routing
Network security principles
Experience operating BAS tools and understanding attack chain methodologies
Familiarity with Red Team concepts and tactics
Working knowledge of Vulnerability Assessment and Penetration Testing (VAPT)
Experience with infrastructure set-up and management
Creative approach to developing realistic attack scenarios and campaigns

Qualifications

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent work experience)
3+ years of experience in cybersecurity with focus on phishing simulations and/or red team operations
Hands-on experience with BAS tools
Basic understanding of infrastructure setup and management

Preferred Certifications (one Or More)

Certified Ethical Hacker (CEH)
eLearnSecurity Junior Penetration Tester (eJPT)
Offensive Security Certified Professional (OSCP)
Practical Network Penetration Tester (PNPT)
Certified Red Team Professional (CRTP)
Certified Red Team Operator (CRTO)
Certified Network Penetration Tester (CNPen)

Personal Attributes

Strong analytical and problem-solving skills
Excellent written and verbal communication abilities
Attention to detail and methodical approach to work
Ability to work independently and as part of a team
Commitment to continuous learning and professional development
Creative mindset for developing effective security testing scenarios

Join our team to help strengthen our security defenses through comprehensive security simulations and contribute to building a more resilient security posture for our organization.

Company Benefits & Perks

Competitive salary package.
Performance based annual bonus (cash and stocks).
Hybrid working model (3 days office/week).
Group Medical & Life Insurance.
Modern offices with free amenities & fully stocked cafeterias.
Monthly food card & company paid snacks.
Hardship/shift allowance with company provided pickup & drop facility*
Attractive employee referral bonus.
Frequent company sponsored team building events and outings.
Depending upon the shifts.
The benefits package is subject to change at the management's discretion.

Security Engineer II