• Support a large, enterprise‑scale environment by driving security governance, policy development, and compliance execution across multiple services and cloud environments. • Partner closely with service owners, engineering teams, and security stakeholders to develop strong access controls, assess and remediate risk, implement monitoring, and automate routine security tasks. • Ensure compliance gaps are closed, privileged access is minimized, and security best practices are consistently applied across infrastructure and cloud platforms.

This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description Knight Division Tactical is seeking a disciplined and technically capable Hacker to support offensive and defensive cybersecurity operations. This role focuses on penetration testing, vulnerability assessment, network exploitation, and security research to protect KDT's systems and support mission-critical cyber operations. The Hacker works closely with operations, intelligence, and technical teams to identify vulnerabilities, simulate adversary tactics, and strengthen KDT's overall security posture. Key Responsibilities - Conduct penetration testing and red team assessments - Identify and exploit vulnerabilities in networks, systems, and applications - Perform security research and threat analysis - Develop and maintain offensive security tools and techniques - Document findings and provide remediation recommendations - Support incident response and threat hunting operations Qualifications - Strong understanding of network protocols, operating systems, and security concepts - Experience with penetration testing tools (Burp Suite, Metasploit, Nmap, etc.) - Knowledge of web application security (OWASP Top 10) - Ability to work under pressure in high-stakes environments - Strong written and verbal communication skills

• Working independently and collaboratively with a team to both lead and support • Perform penetration testing on applications with complex technology stacks from both a: Unauthenticated perspective and Authenticated perspective • Dynamically flex your skills when assessing emerging or custom technologies. • Lead complex engagements to provide a technical consistency approach across multiple tests. • Contextualize vulnerabilities and assess realistic impact to a client accounting for mitigating and aggravating factors. • Manage priorities and tasks to achieve utilization targets. • Operate with professionalism both internally and with clients. • Ensure quality reports and services are delivered efficiently and on time. • Support sales and business growth by scoping out potential opportunities. • Maintains strong depth of knowledge in the practice area. • Collaborate with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables.

• Develop and maintain BW’s enterprise cybersecurity strategy and long-term roadmap. • Lead architecture decisions across cloud, application, identity, data, vulnerability management, and email security domains. • Oversee the implementation and ongoing maintenance of approved security architectures, controls, and technologies. • Ensure security controls are properly deployed, configured, validated, and continuously monitored for effectiveness. • Promote the adoption of Zero Trust principles and secure-by-design engineering practices. • Offer security guidance for AI projects, automation systems, and other emerging technologies. • Work with IT and business teams to ensure the secure design and roll-out of new projects. • Act as BW’s main leader and primary contact for our external cyber defense partner. • Evaluate the delivery of security monitoring, threat detection, response recommendations, and threat insights. • Collaborate to enhance detection coverage, response workflows, communication methods, and tuning. • Evaluate service delivery performance and ensure alignment with BW’s cybersecurity priorities. • Provide strategic leadership during cybersecurity incidents, coordinating with IT, Legal, HR, Privacy, Communications, and other stakeholders. • Serve as the executive-facing cybersecurity representative during significant security events, and coordinate the execution of operational response activities. • Communicate incident severity, business impact, risks, and recommended remediation actions to executive leadership. • Lead post-incident reviews and ensure lessons learned are incorporated into long-term improvements. • Represent cybersecurity during internal audits, external audits, and cybersecurity assessments conducted by key enterprise stakeholders. • Maintain alignment with frameworks such as NIST CSF, ISO 27001, SOC2, and relevant privacy regulations. • Offer senior-level guidance in developing and improving cybersecurity governance programs, policies, standards, and secure architecture guidelines. • Lead enterprise cybersecurity risk assessments and ensure corrective actions are prioritized and implemented effectively. • Provide oversight and direction for cybersecurity elements of privacy and data protection initiatives. • Lead cloud security architecture across AWS and other platforms used by BW. • Guide secure software development practices and coordinate application security reviews. • Oversee identity and access management strategies, including modern authentication and privileged access controls. • Drive Zero Trust adoption across networks, identity, and application environments. • Establish governance and security frameworks for responsible AI usage and advanced automation technologies. • Lead team members focused on cybersecurity architecture, governance, privacy, and strategic initiatives. • Mentor and develop staff capabilities, fostering a culture of continuous learning and innovation. • Strengthen collaboration across IT, Legal, Privacy, Risk, and other business areas to advance cybersecurity maturity. • Act as a trusted advisor to senior leadership on cybersecurity risk, architecture decisions, and strategic initiatives.