Red Team Security Engineer

Jobgether; Canada; Remote; CAD 146,000 - 190,000; Full time

Benefits offered by this job

Remote work in Canada

Health, dental, vision benefits

Disability coverage

Life insurance

401(k) plan

Competitive compensation

Job summary

Jobgether, on behalf of a partner company, is seeking a Red Team Security Engineer based in Canada. You will collaborate with software and engineering teams to emulate adversaries, identify weaknesses in cloud environments, and validate detections.

You will assess IAM, CI/CD pipelines, containers, and cloud-native services, and work with blue teams to improve monitoring and response capabilities. Strong writing and communication are essential for this role.

Qualifications

• 5+ years of experience in offensive security, red teaming, penetration testing, or security detection validation.
• Strong understanding of attacker tactics, techniques, and procedures, mapped to MITRE ATT&CK.
• Hands-on cloud security experience across cloud infrastructure, IAM, CI/CD, containers, and cloud-native services.
• Ability to identify and validate complex attack paths from an adversarial perspective.
• Strong technical writing and clear communication for diverse stakeholders.
• Certifications such as OSCP, OSEP, GXPN, GPEN or cloud security credentials are highly valued.

Responsibilities

• Plan and execute red team operations and adversary simulations across cloud environments.
• Evaluate security of cloud infrastructure, IAM, CI/CD pipelines, containers, and cloud-native services.
• Identify and validate attack paths involving IAM misconfigurations, excessive privileges, exposed secrets, and insecure automation.
• Assess detection and response capabilities by testing logging, alerting, monitoring, and incident response processes.
• Research attacker techniques and cloud exploitation trends relevant to modern enterprise environments.
• Translate findings into actionable remediation and coordinate with engineering teams to address vulnerabilities.
• Communicate security risks and findings clearly to stakeholders across security and engineering.

Skills

Offensive security

Red teaming

Penetration testing

Security detection validation

MITRE ATT&CK mapping

Cloud security

Technical writing

Communication

Education

Security certifications (OSCP/OSEP/GXPN/GPEN)

Tools

AWS

Azure

GCP

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Red Team Security Engineer based in Canada.

As a Red Team Security Engineer, you will play a key role in strengthening the security posture of a modern technology organization. You will partner closely with software and engineering teams to identify, validate, and address security weaknesses across cloud environments. The role focuses on adversary emulation, offensive security assessments, and realistic attack simulations designed to uncover exploitable paths. You will assess cloud infrastructure, identity architectures, CI/CD pipelines, containers, and cloud-native services. You will also help evaluate detection and response capabilities by working alongside security monitoring and incident response teams. This is an opportunity to apply advanced offensive security expertise while directly improving the resilience of critical technology environments.

Accountabilities

• Plan and execute red team operations, adversary simulations, and targeted offensive security assessments across cloud environments.
• Evaluate the security of cloud infrastructure, identity and access architectures, CI/CD pipelines, containerized workloads, and cloud-native services.
• Identify and validate attack paths involving IAM misconfigurations, excessive privileges, exposed secrets, metadata abuse, insecure automation, and weaknesses in cloud service configurations.
• Assess security detection and response capabilities by testing logging, alerting, monitoring, and incident response processes in collaboration with blue team and detection engineering functions.
• Research emerging attacker techniques, cloud exploitation trends, and new abuse paths relevant to modern enterprise environments.
• Translate findings into actionable remediation efforts and work with engineering teams to help address identified vulnerabilities.
• Communicate security risks and technical findings clearly to stakeholders across security, engineering, and other technical functions.

Requirements

• 5+ years of experience in offensive security, red teaming, penetration testing, and/or security detection validation.
• Strong understanding of attacker tactics, techniques, and procedures, with the ability to map findings to frameworks such as MITRE ATT&CK.
• Hands-on knowledge of cloud security, including cloud infrastructure, IAM, CI/CD environments, containers, and cloud-native services.
• Ability to identify and validate complex attack paths and assess security controls from an adversarial perspective.
• Strong technical writing skills, with the ability to produce concise, actionable security reports.
• Excellent communication skills and the ability to explain complex technical security issues to diverse stakeholders.
• Relevant industry certifications such as OSCP, OSEP, GXPN, GPEN, or recognized cloud security certifications are valued.

Benefits

• Compensation range of $146,000–$190,000 CAD, depending on location and factors such as education, experience, and certifications.
• Potential eligibility for restricted stock units as part of total compensation.
• Health, pharmacy, optical, and dental care benefits, subject to eligibility.
• Paid time off and sick time off.
• Short-term and long-term disability coverage.
• Life insurance.
• 401(k) contribution, subject to eligibility.
• Remote work opportunity in Canada.
• Some interviews or new-hire training sessions may be held in person at a global office.
• Equal opportunity workplace committed to diverse backgrounds, experiences, abilities, and perspectives.