Senior Staff Security Engineer, Red Team
About the role
We’re hiring a Staff Security Engineer, Red Team to lead offensive security and adversary simulation efforts across Nscale.
In this high-impact, hands-on role, you will sit within the security function and work closely with Detection & Response and Security Engineering to emulate real-world attackers across cloud, infrastructure, enterprise environments, identity systems, endpoints, and applications. You’ll combine deep technical execution with staff-level leadership, helping shape how offensive security is practiced across the organization.
Your work will directly uncover vulnerabilities, validate detection and response capabilities, and drive meaningful security improvements. By bringing sophisticated red team operations, purple team collaboration, and AI-assisted techniques into the environment, you will help strengthen Nscale’s resilience against modern attack methods.
This role will be part of the global CISO organization.
What you'll be doing
- Red Team Operations
- Plan and execute red team operations and adversary simulations across cloud, infrastructure, and enterprise environments
- Simulate advanced attack techniques including initial access, lateral movement, privilege escalation, and persistence
- Emulate real-world attacker behavior to identify weaknesses across infrastructure, identity systems, endpoints, and applications
- Lead complex offensive engagements with the depth and judgment expected at Staff level
- Offensive Testing and Tooling
- Perform penetration testing across applications, APIs, identity systems, and internal services
- Develop and maintain offensive tooling, scripts, and supporting infrastructure
- Leverage AI-assisted techniques to enhance reconnaissance, attack simulation, and test coverage
- Apply modern offensive tools and frameworks in support of sophisticated security testing
- Detection Validation and Security Improvement
- Identify gaps in preventive controls, detection coverage, and response capabilities
- Partner with Detection & Response teams to validate and improve detection logic and alerting
- Collaborate with Security Engineering to remediate vulnerabilities and strengthen system design
- Translate offensive findings into actionable improvements across the security posture
- Purple Teaming and Communication
- Lead and participate in purple team exercises to improve coordination between offensive and defensive teams
- Document findings clearly, including risk, impact, and remediation strategies
- Communicate technical issues and attack paths in a way that drives informed prioritization and action
- Influence security strategy through practical, evidence-based recommendations
KPIs
- Red team operations executed across cloud, infrastructure, and enterprise environments
- Detection and alerting gaps identified and validated
- Vulnerabilities remediated through Security Engineering partnership
- Purple team exercises completed and coordination improved
About You
- 8+ years of experience in red teaming, offensive security, or penetration testing
- Proven experience conducting adversary simulation and complex attack chains
- Strong expertise across network, application, cloud, and identity security
- Deep understanding of the MITRE ATT&CK framework and attacker methodologies
- Hands-on experience with offensive tools and frameworks such as Cobalt Strike, Burp Suite, and Metasploit
- Experience working in cloud environments and modern infrastructure
- Ability to develop custom tools or automation for offensive security work
- Ability to operate at Staff level, including leading engagements, defining strategy, and influencing security improvements
What we can offer you
- A highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months.
- Human-First Flexibility: We treat you as humans first. 🫶🏽 Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments.
- Equal Opportunities Statement: We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds.