Назад
Company hidden
2 дня назад

Lead Information Security Engineer - Red Team

105 786 - 155 152$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Lead Information Security Engineer - Red Team (Cybersecurity/Adversarial Emulation): Leading penetration testing and adversarial emulation across enterprise systems, cloud platforms, applications, APIs, databases, and identity systems with an accent on threat-informed testing, cloud security, and AI-driven attack scenarios. Focus on planning complex ACE engagements, identifying attack paths, guiding remediation, and expanding Red Team capabilities through automation and AI/ML-enabled security testing.

Location: Remote, United States; open to candidates located anywhere in the U.S.

Salary: $105,786–$141,047, $111,074–$148,099, or $116,364–$155,152 depending on state.

Company

hirify.global provides secure, high-performance connectivity across cloud, edge, and AI workloads for enterprises, governments, and communities through its fiber network and connected ecosystem.

What you will do

  • Lead penetration testing, adversarial emulation, threat-based assessments, and Red Team engagements across enterprise infrastructure, products, services, and applications.
  • Plan, execute, coordinate, and report on complex assessments covering infrastructure, applications, cloud platforms, APIs, databases, and identity systems.
  • Plan and direct Adversarial Cybersecurity Emulation exercises, including AI-driven threat scenarios, while coordinating stakeholders and managing risk.
  • Define testing strategies, review findings and risk assessments, and drive remediation efforts to completion.
  • Partner with incident response, engineering, product, business, and security teams to identify vulnerabilities, evaluate attack paths, and strengthen controls.
  • Lead technical initiatives involving automation, tooling, process improvements, AI/ML-enabled security capabilities, and expanded Red Team services; communicate technical risks and business impact to executive and technical audiences.

Requirements

  • Bachelor’s degree in Information Security, Computer Science, Engineering, or a related field, or equivalent experience.
  • 5+ years of hands-on penetration testing, offensive security, or advanced security assessment experience; 7+ years in Information Security, or 5+ years with a Bachelor’s degree.
  • Professional penetration-testing certification such as GPEN, GWAPT, GMOB, OSCP, OSWE, or equivalent.
  • Experience leading complex penetration tests and adversarial exercises from planning through technical and executive reporting.
  • Deep expertise in MITRE ATT&CK, threat-informed testing, adversarial emulation, modern cyber threats, vulnerabilities, and exploit techniques.
  • Strong knowledge of AWS, Azure, and/or GCP security, including identity, networking, workloads, and cloud control planes.
  • Experience applying OWASP, NIST, CIS Controls, and other security frameworks.
  • Advanced knowledge of networks, operating systems, identity systems, applications, APIs, scripting, and enterprise technologies.
  • Leadership, mentoring, communication, and stakeholder-management skills, with the ability to drive multiple workstreams while remaining technically hands-on.

Nice to have

  • Master’s degree in Information Security, Computer Science, Engineering, or a related field.
  • 7+ years of penetration testing or offensive security experience in large enterprise environments.
  • 3+ years leading Red Team engagements and coordinating with defensive, business, and executive stakeholders.
  • Experience developing security tools, exploits, payloads, automations, and new Red Team capabilities.
  • Experience assessing mobile technologies, AI systems, cloud services, and other emerging technologies.
  • Knowledge of AI/ML applications in cybersecurity, including adversarial testing and automation.
  • Experience creating technical training, teaching, presenting at conferences, or building development programs.
  • Advanced certifications such as GXPN, OSEP, or equivalent.

Culture & Benefits

  • Remote work for candidates located anywhere in the United States.
  • Health, life, voluntary lifestyle, and other benefits supporting physical, mental, emotional, and financial wellbeing.
  • Short-term incentives, long-term incentives, and/or sales compensation may be available.
  • Collaborative environment with clear expectations, shared accountability, and support for innovation.
  • Background screening may include criminal-record, motor-vehicle, or drug checks depending on position requirements.

Hiring process

  • Selected candidates undergo a background screen.
  • Background results are evaluated case by case, and job-related concerns may affect eligibility.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →