Red Team Security Engineer

About the role

The Red Team Security Engineer will design and execute realistic adversary simulations while also building automation across SIEM, SOAR and other security platforms. The role blends offensive testing, detection engineering and workflow automation to strengthen the organization’s overall security posture.

Key responsibilities

• Plan and conduct authorized Red Team engagements, covering reconnaissance, exploitation, lateral movement and persistence.
• Assess security controls across endpoints, identities, networks, applications, cloud and infrastructure.
• Develop and maintain offensive tools, scripts, payloads and testing infrastructure.
• Apply the MITRE ATT&CK framework for planning, execution, reporting and detection validation.
• Partner with Blue Team to run purple‑team exercises and validate remediation.
• Identify manual security processes and convert them into automated SIEM/SOAR workflows.
• Build integrations between security platforms using APIs, webhooks and scripts.
• Create reusable automation scripts in Python, PowerShell and REST APIs, ensuring proper testing, logging and change management.

Required profile

• Strong background in offensive security and Red Team operations.
• Experience with security automation, SIEM and SOAR platforms.
• Ability to work across both offensive and defensive security domains.
• Proven track record of developing scripts and tools for security investigations.
• Familiarity with MITRE ATT&CK and purple‑team methodologies.

Required skills

• Python
• PowerShell
• REST APIs
• JSON
• Git‑based development workflows
• MITRE ATT&CK framework
• SIEM platforms
• SOAR platforms