Design and evolve the Red Team capability (35%)
Define and continuously refine the red team engagement model, including methodology, scope development, rules of engagement, evidence standards, and quality controls.
Lead execution of high-impact offensive campaigns (40%)
Drive measurable defensive impact and organizational enablement (25%)
Collaborate with Threat Hunt, SOC, and Incident Response teams to validate and strengthen detection and response capabilities.

Demonstrated experience leading complex red team engagements or adversary simulations across applications, endpoints, APIs, and cloud environments.
Proven ability to influence technical direction and raise operational standards without formal people management authority.
7+ years of experience in cybersecurity, with at least 3–5 years in offensive security, red team, or advanced penetration testing roles.
Deep hands-on expertise with modern C2 frameworks and adversary simulation tooling, with the ability to adapt tradecraft to evolving defensive controls.
Strong understanding of attacker methodologies, including MITRE ATT&CK, OWASP Top 10, CWEs, and real-world threat intelligence, and the ability to translate those into practical attack scenarios.
Experience conducting purple team exercises and validating SIEM, EDR, and network detection capabilities through controlled simulation and evidence-based testing.
Experience delivering executive-ready briefings that clearly communicate technical risk, business impact, and prioritized remediation actions.
High degree of discretion, integrity, and operational discipline when conducting sensitive offensive security work.
Bachelor’s degree in Computer Science, Engineering, or equivalent practical offensive security experience.
Authorization to work in the United States without sponsorship.
Ability to travel 3-5 times a year to our NYC or Reston, VA office.

Lead Engineer

Key skills