What are the responsibilities and job description for the Senior Security Engineer position at Thoughtwave Software and Solutions?
Job Details
Role: Senior Security Engineer - Red Team
Location:100% REMOTE
Duration:12 Months
Description:
We are seeking a skilled and motivated Senior Security Engineer - Red Team to join our offensive security team. The ideal candidate will drive the development of advanced red teaming tools and methodologies, conduct comprehensive assessments across on-premises and cloud environments, and simulate sophisticated threat scenarios to identify and mitigate security vulnerabilities. This role requires a deep understanding of offensive security tactics, attack frameworks, and the ability to communicate findings effectively to both technical and executive stakeholders.
Key Responsibilities:
- Developing and refining internal red team scripts, tools, and methodologies to enhance offensive security operations.
- Research, validate, and exploit known attacks, vulnerabilities, and security weaknesses using custom-built or existing tools.
- Conduct thorough Red Team assessments targeting on-premises infrastructure, cloud environments, and enterprise threat landscapes.
- Identify vulnerabilities across software, systems, networks, and business logic through simulated adversarial tactics.
- Design and execute complex threat emulation scenarios incorporating physical, social engineering, and digital attack vectors.
- Produce detailed, accurate, and actionable reports and presentations tailored for both technical teams and executive leadership.
- Collaborate closely with other security teams to support remediation efforts and improve overall security posture.
- Stay current with emerging threats, attack techniques, and security technologies to continuously evolve red team capabilities.
- Conduct Purple Team exercises in collaboration with partner security teams to identify and improve the organization's security posture.
Requirements
- Minimum 5 years of hands-on offensive security experience, preferably within Red Team or penetration testing roles.
- Strong familiarity with attack frameworks (e.g., MITRE ATT&CK) and corresponding mitigation strategies.
- Proficient with common Command and Control (C2) frameworks such as Sliver, Mythic, and Cobalt Strike.
- Relevant security certifications such as CRTO (Certified Red Team Operator), OSCP (Offensive Security Certified Professional), or equivalent.
- Demonstrated ability to develop custom offensive tools or scripts to support red team operations.
- Excellent communication skills with the ability to convey complex technical findings to diverse audiences.
- Experience with cloud security assessments (AWS, Azure, Google Cloud Platform) is a plus.
- Strong problem-solving skills and a proactive approach to security challenges.
Preferred Skills:
- Knowledge of physical security testing and social engineering tactics.
- Familiarity with scripting languages such as Python, PowerShell, or Bash.
- Experience working in agile or DevSecOps environments.
- Understanding of enterprise network architectures and security controls.
--
--
---
----
Thanks & Regards,
Mohan Sai| Talent Acquisition Lead
Thoughtwave Software and Solutions
Mobile/Text Messages: EXTN: 143
Email:
linkedin:
Location:100% REMOTE
Duration:12 Months
Description:
We are seeking a skilled and motivated Senior Security Engineer - Red Team to join our offensive security team. The ideal candidate will drive the development of advanced red teaming tools and methodologies, conduct comprehensive assessments across on-premises and cloud environments, and simulate sophisticated threat scenarios to identify and mitigate security vulnerabilities. This role requires a deep understanding of offensive security tactics, attack frameworks, and the ability to communicate findings effectively to both technical and executive stakeholders.
Key Responsibilities:
- Developing and refining internal red team scripts, tools, and methodologies to enhance offensive security operations.
- Research, validate, and exploit known attacks, vulnerabilities, and security weaknesses using custom-built or existing tools.
- Conduct thorough Red Team assessments targeting on-premises infrastructure, cloud environments, and enterprise threat landscapes.
- Identify vulnerabilities across software, systems, networks, and business logic through simulated adversarial tactics.
- Design and execute complex threat emulation scenarios incorporating physical, social engineering, and digital attack vectors.
- Produce detailed, accurate, and actionable reports and presentations tailored for both technical teams and executive leadership.
- Collaborate closely with other security teams to support remediation efforts and improve overall security posture.
- Stay current with emerging threats, attack techniques, and security technologies to continuously evolve red team capabilities.
- Conduct Purple Team exercises in collaboration with partner security teams to identify and improve the organization's security posture.
Requirements
- Minimum 5 years of hands-on offensive security experience, preferably within Red Team or penetration testing roles.
- Strong familiarity with attack frameworks (e.g., MITRE ATT&CK) and corresponding mitigation strategies.
- Proficient with common Command and Control (C2) frameworks such as Sliver, Mythic, and Cobalt Strike.
- Relevant security certifications such as CRTO (Certified Red Team Operator), OSCP (Offensive Security Certified Professional), or equivalent.
- Demonstrated ability to develop custom offensive tools or scripts to support red team operations.
- Excellent communication skills with the ability to convey complex technical findings to diverse audiences.
- Experience with cloud security assessments (AWS, Azure, Google Cloud Platform) is a plus.
- Strong problem-solving skills and a proactive approach to security challenges.
Preferred Skills:
- Knowledge of physical security testing and social engineering tactics.
- Familiarity with scripting languages such as Python, PowerShell, or Bash.
- Experience working in agile or DevSecOps environments.
- Understanding of enterprise network architectures and security controls.
--
--
---
----
Thanks & Regards,
Mohan Sai| Talent Acquisition Lead
Thoughtwave Software and Solutions
Mobile/Text Messages: EXTN: 143
Email:
linkedin:
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
