Senior Threat Emulation Engineer

This is an offensive role. You'll spend your time attacking our environment, not defending it. The work: You'll run adversary emulation campaigns against enterprise infrastructure — replicating the tradecraft of real threat actors, not just running scanners and handing over a report. Pen tests, web app assessments, threat modeling, exploit research against our own stack. You find the path in before someone else does. When you break something, you'll write it up so it actually gets fixed: what you did, why it worked, what it means in business terms, and how to close it. You'll work directly with detection and response teams so your findings sharpen their rules — your attacks make the defense better, but you're not the one writing signatures. You’ll also mentor junior offensive talent and stay current on emerging tradecraft, because the job is emulating what attackers do now, not what they did three years ago. What we need: 5+ years in security with real offensive depth: penetration testing, adversary emulation, web app exploitation, vulnerability research You’ve worked from threat intel — taking actual actor TTPs and reproducing them, not just running Cobalt Strike defaults You can read an environment, find the weak points, and chain them You can explain your kill chain to a non-technical audience without losing them Degree in a related field or the experience that makes it irrelevant Strongly preferred: OSCP, OSWE, OSEP, or equivalent — certs from the practical, hands‑on-keyboard side Large enterprise experience, especially regulated environments If your background is SOC, detection engineering, or vuln management and you’re looking to move offensive — this isn’t the transition role. We need someone already doing this work. #J-18808-Ljbffr Interactive Resources - iR