Delinea’s Cybersecurity organization is seeking a Senior Offensive Security Engineer to mature Delinea’s in-house Offensive Security program. The role involves working alongside Product Development, DevOps, IT, and SecOps teams to shape the future of Penetration Testing and Red Teaming.
Responsibilities
Lead the build out of red and purple team operations, emulating real-world adversary TTPs to test security controls and detection and response capabilities.
Lead internal and external network and infrastructure penetration tests across enterprise and product environments.
Identify and exploit attack paths in identity infrastructure, including Active Directory, Entra ID, Kerberos, and credential and secrets exposure.
Perform source code review in support of testing engagements.
Create or reproduce and demonstrate proof-of-concept exploits for findings and externally reported vulnerabilities.
Requirements
Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related technical field, or equivalent work experience
The Ethical Hacker – Infrastructure & Red Team is responsible for planning, executing, and reporting on infrastructure penetration testing, cloud security assessments, Active Directory security assessments, and adversary simulation engagements.
Locations (2)
Florida, United States
Texas, United States
Responsibilities
Plan and execute infrastructure penetration testing engagements across on-premises, hybrid, cloud, wireless, and enterprise network environments.
Perform internal and external network penetration testing to identify, validate, and exploit security vulnerabilities using manual testing methodologies and industry-standard offensive security tools.
Assess enterprise technologies including Active Directory, Microsoft Entra ID (Azure AD), Windows and Linux environments, virtualization platforms, cloud services, and supporting infrastructure.
Evaluate cloud environments including AWS, Microsoft Azure, and Google Cloud Platform to identify configuration weaknesses, privilege escalation opportunities, identity risks, and cloud security vulnerabilities.