Sr. Red Team Engineer / Hybrid / Scottsdale

About the role

This is not a checkbox pen testing role. You'll be doing real adversary emulation against one of the highest-value target environments in the country — payments infrastructure relied on by millions every day. Financially-motivated APTs aren't a hypothetical here; they're the actual threat model.

Responsibilities

• 40% Cloud (AWS / Azure) offensive security
• 30% Network & internal infrastructure red teaming
• 20% Web and application-layer exploitation
• 10% Mobile application testing
• 70% Hands-on (campaigns, exercises, tooling development, exploit research)
• 20% Team collaboration (purple team work, scoping with internal security partners, IR/CTI support)
• 10% Reporting and stakeholder communication

Requirements

• 6+ years of information security experience, with at least 2 years in offensive security roles
• Hands-on experience running red team campaigns and adversary emulation exercises
• Strong working knowledge of tools and techniques for network, cloud, and web-based campaigns, plus the ability to develop and execute new exploits at scale
• Solid grasp of threat modeling, cloud security, cryptography, authentication & authorization, and defensive detection techniques (including offensive evasion)
• Proficiency writing and maintaining scripts in PowerShell, Python, and Go
• Strong written and verbal communication; able to brief both technical and non-technical audiences
• Bachelor's degree in a relevant field or equivalent practical experience

Qualifications

• Hands-on experience with adversary emulation frameworks and C2 platforms (Cobalt Strike, Mythic, Sliver, CALDERA, Atomic Red Team, etc.)
• Deep understanding of MITRE ATT&CK, MITRE CAPEC, and the Cyber Kill Chain
• Mobile application testing and vulnerability research experience
• Practical offensive security certifications: OSCP, OSEP, ePTX, GPEN, HTB CPTS, or equivalent
• Cloud certifications: AWS SAA/SAP, AWS Security Specialty, or equivalent
• Experience moving from a single vulnerability to identifying organization-wide impact

Skills

• Hands-on experience with adversary emulation frameworks and C2 platforms (Cobalt Strike, Mythic, Sliver, CALDERA, Atomic Red Team, etc.)
• Deep understanding of MITRE ATT&CK, MITRE CAPEC, and the Cyber Kill Chain
• Mobile application testing and vulnerability research experience
• Practical offensive security certifications: OSCP, OSEP, ePTX, GPEN, HTB CPTS, or equivalent
• Cloud certifications: AWS SAA/SAP, AWS Security Specialty, or equivalent
• Experience moving from a single vulnerability to identifying organization-wide impact

Benefits

• Medical, Dental, and Vision Insurance (PPO/HDHP options with HSA company contributions)
• Flexible PTO for exempt employees, plus 11 paid company holidays and a paid volunteer day
• 401(k) with 100% safe harbor match on first 6% (immediate eligibility)
• 12 weeks paid parental leave
• Family planning benefits including fertility, adoption, and surrogacy support
• Commuter and dependent care FSA options

Pay

$132,000 – $165,000 base salary

Schedule

Hybrid opportunity in Scottsdale, AZ