Offensive Security Engineer-Sydney/Brisbane

The HR Ally; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

The HR Ally in Australia seeks an Offensive Security Engineer (Red/Purple Team) to run adversary emulation across critical apps, infrastructure and controls in Brisbane or Sydney. You will build red team infra and validate detections and logging, closing gaps and maturing security postures.

Use BAS/ATT&CK, Python automation and AI-assisted tooling to scale attack-path analyses, and translate findings into actionable remediation, new detections, log sources and controls for the engineering

Qualifications

• Hands-on offence with adversary emulation across cloud/infra/endpoint.
• Detection and logging fluency (purple team).
• BAS and ATT&CK knowledge.
• Python and automation development.
• AI tooling for cyber tasks (GPT-5.5, Codex, Claude Code, Copilot).
• AI-assisted code-analysis infrastructure setup.
• Detection engineering experience.
• Application/code security (SAST/DAST/SCA).

Responsibilities

• Runs red and purple team engagements against critical apps, infrastructure and controls.
• Builds and maintains fit-for-purpose red team infrastructure.
• Validates controls, detection and logging; finds gaps and proves they are closed.
• Owns and matures Breach & Attack Simulation.
• Uses AI to scale attack-path analysis and prioritise the gaps that matter.
• Closes the loop: proposes remediation, new detections, log sources and controls; drives findings into the engineering backlog.

Skills

Adversary emulation

C2 exploitation

Attack-path analysis

Detection & logging

BAS & ATT&CK

Python automation

AI tooling

GitLab Ultimate

Code-analysis infra

Detection engineering

SAST/DAST/SCA

Tools

GitLab Ultimate

Code-analysis infra

Job description

Only for Australia PR/Citizens

Job Title: Offensive Security Engineer (Red / Purple Team)

Location: Brisbane / Sydney

Responsibilities:

• Runs red and purple team engagements against critical apps, infrastructure and controls


• Builds and maintains fit-for-purpose red team infrastructure


• Validates controls, detection and logging; finds gaps and proves they are closed


• Owns and matures Breach & Attack Simulation


• Uses AI to scale attack-path analysis and prioritise the gaps that matter


• Closes the loop: proposes remediation, new detections, log sources and controls; drives findings into the engineering backlog

Must-have skills:

• Hands-on offence: adversary emulation, C2, exploitation, attack-path analysis across cloud / infra / endpoint


• Detection and logging fluency (the purple half)


• BAS and ATT&CK


• Python and automation; tight rules-of-engagement discipline

• AI coding / agentic tools (GPT-5.5 Trusted Access for Cyber, Codex, Claude Code, Copilot or similar) to find and prove exploitable vulns at repo scale


• GitLab Ultimate; standing up AI-assisted code-analysis infrastructure


• Detection engineering


• Application / code security experience (SAST, DAST, SCA)