Accountabilities:

Lead Red Team operations: Plan and execute complex, full-scope adversary emulation campaigns across enterprise environments, applying advanced offensive security methodologies and disciplined operational practices to assess organizational security resilience.
Drive Purple Team engagements: Collaborate with defensive security and detection engineering teams to validate security controls, evaluate detection coverage, identify defensive gaps, and translate offensive testing results into actionable security improvements.
Own end-to-end security engagements: Manage the technical lifecycle of Red Team and Purple Team projects, including engagement scoping, test planning, execution, remediation verification, and the delivery of comprehensive technical reports.
Conduct advanced security research: Investigate emerging vulnerabilities, attack techniques, exploitation methods, and security weaknesses across enterprise infrastructure, cloud platforms, and application environments.
Develop custom offensive security tools: Design, build, and maintain specialized tooling to improve testing capabilities, automate security research, and advance the team's technical effectiveness.
Leverage AI for cybersecurity operations: Build and operate AI-powered orchestration frameworks, automation layers, and tools around large language models (LLMs) and agentic systems to support activities such as reconnaissance, security research, vulnerability discovery, and engagement reporting.
Assess cloud and enterprise environments: Evaluate security weaknesses across cloud infrastructure, identity systems, networking, storage, serverless environments, infrastructure-as-code, and common operating systems.
Evaluate security controls and defenses: Assess the effectiveness of network and endpoint security technologies, including web application firewalls, intrusion detection and prevention systems, and endpoint detection and response solutions.
Produce high-quality technical deliverables: Create detailed security assessment reports, proof-of-concept documentation where appropriate, remediation verification summaries, and recommendations that support measurable risk reduction.
Drive continuous security improvement: Contribute to stronger detection and response capabilities, reduce recurring security issues, and improve the overall effectiveness of enterprise cybersecurity programs.

Requirements

Education and professional experience: Master's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline, or equivalent professional experience. At least 9 years of cybersecurity experience, with substantial specialization in offensive security.
Advanced offensive security expertise: Demonstrated hands-on proficiency in at least three of the following technical domains, with Red Team Operations or Red Team Development being mandatory:
Red Team Operations.
Red Team Development, including offensive tooling and security research.
Exploit development and vulnerability discovery, including zero-day research.
Reverse engineering.
Detection engineering.
Penetration testing.
AI-enabled offensive security.
Red Team and Purple Team experience: Proven ability to plan, lead, and execute sophisticated security engagements, demonstrating strong technical judgment, operational discipline, and the ability to translate findings into meaningful defensive improvements.
Cloud security expertise: Practical experience assessing cloud workloads and configurations across AWS, Microsoft Azure, and Google Cloud Platform (GCP), including identity and access management, networking, storage, serverless services, and infrastructure-as-code.
Operating system and platform knowledge: Strong technical familiarity with Linux and Windows server and client environments. Experience with macOS is considered an advantage.
Programming and automation: Strong development skills in Python, Go, Rust, C/C++, or equivalent programming languages, with the ability to build custom security tools, automate testing, and investigate emerging attack techniques.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1