Senior Red Team Engineer

Allstate is a company that has been protecting families and their belongings for over 90 years. As a Senior Red Team Engineer, you will lead adversary emulation efforts to validate defenses against real-world threats and mentor other team members while developing actionable recommendations for senior leadership.

Responsibilities:

• Lead full-scope red team operations, from scoping to exfil. Including stealthy, multi-stage attack simulations across enterprise environments while staying within rules of engagement
• Design advanced adversary emulation scenarios based on threat intelligence and MITRE ATT&CK techniques
• Operate in complex enterprise stacks and conduct exploitation of systems, networks, Active Directory, and cloud infrastructure, focusing on realistic threat behavior
• Identify gaps in detection, prevention, and response mechanisms, and collaborate with security engineering and detection teams to address them
• Build custom tooling and payloads to evade controls and simulate advanced threat capabilities
• Manage infrastructure necessary to conduct red team operations
• Mentor other red teamers and contribute to internal training, tool development, and process improvement
• Develop detailed reports and present findings to both technical and executive stakeholders, translating risk into actionable recommendations

Requirements:

• 6+ years of hands-on experience in offensive security, with at least 2 years leading or co-leading objective-based red team operations
• Deep understanding of enterprise environments (Windows, Linux, AD, Azure/AWS/GCP), including common misconfigurations and attack paths
• Advanced proficiency with offensive tools and frameworks (e.g., Cobalt Strike, Mythic, BloodHound, SharpHound, Mimikatz, PowerShell Empire) and ability to write or modify tooling for OPSEC and EDR evasion
• Strong ability to develop or customize attack tooling (Python, PowerShell, C#, Bash)
• Understanding of modern security controls (EDR, MFA, network segmentation, logging)
• Expert use of the MITRE ATT&CK framework for planning, execution, and reporting
• Excellent communication skills, including the ability to write clear, concise, and technically deep reports and exec-level narratives that drive decisions and remediation
• Contributions to the security community (research, tools, talks, blogs)
• Relevant certifications (e.g., OSEP, OSCP, CRTO, OSCE, GXPN) are valued but not required
• Education 4 year Bachelors Degree (Preferred not required)
• Experience 6 or more years of experience (Preferred)