Senior Red Team Security Engineer — Cloud & IAM Adversary Emulation

Motive; United Kingdom; Vor Ort; GBP 100.000 - 150.000; Vollzeit

Zusammenfassung

Motive in the United Kingdom is seeking a Red Team Security Engineer to join the Product Security Team. You will act as the primary security partner for software and engineering, conducting adversary emulation and offensive assessments across cloud environments while driving remediation.

You will plan red team operations, evaluate cloud infrastructure and CI/CD pipelines, identify IAM misconfigurations and secrets exposure, and test detection and incident response with blue team colleagues.

Qualifikationen

• 5+ years in offensive security and red teaming.
• Ability to map findings to MITRE ATT&CK framework.
• Strong report writing and stakeholder communication.
• Certifications such as OSCP, OSEP, GXPN, GPEN or cloud security certs.

Aufgaben

• Plan and execute red team operations, adversary simulations, and targeted security assessments focused on cloud environments.
• Evaluate the security of cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services.
• Identify and validate attack paths involving IAM misconfigurations, overprivileged roles, secrets exposure, metadata abuse, insecure automation, and weaknesses in cloud service configurations.
• Assess detection and response coverage by exercising logging, alerting, monitoring, and incident response processes with blue team colleagues.
• Track emerging attacker techniques and cloud exploitation trends relevant to modern enterprise environments.

Kenntnisse

Offensive security

Red teaming

Penetration testing

MITRE ATT&CK

Report writing

Cloud security

Jobbeschreibung

Motive in the United Kingdom is seeking a Red Team Security Engineer to join the Product Security Team. You will act as the primary security partner for software and engineering, conducting adversary emulation and offensive assessments across cloud environments while driving remediation.

You will plan red team operations, evaluate cloud infrastructure and CI/CD pipelines, identify IAM misconfigurations and secrets exposure, and test detection and incident response with blue team colleagues.