Senior Offensive Security Engineer
Core
Lead red and purple team operations to emulate adversary TTPs, test security controls, and validate detection/response capabilities for Delinea's identity security platform and enterprise infrastructure.
Role type
Senior IC Offensive Security Engineer (Red/Purple Team)
Builds
Penetration testing engagements, proof-of-concept exploits, and custom security automation tools for cloud, identity, and web application environments.
Domain
Cybersecurity, Identity & Access Management, Cloud Security (Azure/AWS)
Required skills
Penetration testing methodology (MITRE ATT&CK, OWASP, PTES), Identity infrastructure exploitation (Active Directory, Entra ID, Kerberos, OAuth, SAML), Cloud infrastructure testing (Azure, AWS), Source code review (C#, Java, JS/TS), Exploit development (Python, Go, PowerShell), Adversary emulation (Cobalt Strike, Sliver, Mythic), Security reporting and remediation guidance
Preferred skills
Container and CI/CD pipeline security testing, LLM security testing (prompt injection, OWASP Top 10 for LLM), FedRAMP/ITAR experience, Bug bounty participation, CTF competition experience
Technologies
Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Cobalt Strike, Sliver, Mythic, Kubernetes, Azure, AWS
Responsibilities
Lead internal and external network/infrastructure penetration tests; Identify and exploit attack paths in identity infrastructure; Create and demonstrate proof-of-concept exploits; Plan and execute full-cycle penetration testing engagements; Develop custom tools and automation for testing efficiency; Partner with DevOps and Product teams to validate remediation; Stay current on emerging vulnerabilities and attacker tradecraft
Seniority
Senior, hands-on IC
