Lead complex, intelligence-informed adversary emulations and develop offensive tooling for the organization’s IT security team.
Locations (3)
San Antonio, Texas, United States
Live Oak, Texas, United States
Texas, United States
Responsibilities
Lead complex, multi-domain adversary-emulation campaigns targeting critical services, high-value assets, privileged identities, cloud control planes, applications, data, and software delivery systems.
Translate threat intelligence and business context into campaign objectives, adversary profiles, attack hypotheses, target selections, techniques, success criteria, and measurable defensive outcomes.
Design engagement plans, rules of engagement, safety controls, communications, deconfliction, escalation paths, data-handling requirements, and technical workstreams.
Execute and supervise advanced attack activity involving stealth, persistence, identity compromise, lateral movement, cloud privilege escalation, application exploitation, data access, and objective demonstration.
Lead controlled social-engineering, physical, wireless, third-party, or assumed-breach scenarios when explicitly approved.
Requirements
Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience.
The Offensive Security Engineer III leads complex, intelligence-informed adversary emulations to test how well the organization’s people, processes, architecture, and technology withstand realistic multi-stage attacks.
Locations (2)
Live Oak, Texas, United States
Texas, United States
Responsibilities
Lead complex, multi-domain adversary-emulation campaigns targeting critical services, high-value assets, privileged identities, cloud control planes, applications, data, and software delivery systems.
Translate threat intelligence and business context into campaign objectives, adversary profiles, attack hypotheses, target selections, techniques, success criteria, and measurable defensive outcomes.
Design engagement plans, rules of engagement, safety controls, communications, deconfliction, escalation paths, data-handling requirements, and technical workstreams.
Execute and supervise advanced attack activity involving stealth, persistence, identity compromise, lateral movement, cloud privilege escalation, application exploitation, data access, and objective demonstration.