Adversarial Security Lead | Red-Team & Threat Modeling

Steampunk; McLean (VA); On-site; USD 85,000 - 170,000; Full time

Job summary

Steampunk is seeking a Red-Team / Adversarial Security Lead to plan and execute threat-based assessments across enterprise environments. You will develop threat models, conduct adversarial testing, and evaluate security controls to support pass/fail safety gating.

You will collaborate with cybersecurity, infrastructure, cloud, engineering, and architecture teams, document findings with evidence, and drive remediation verification across Windows, Linux, and cloud platforms.

Qualifications

• Ability to obtain and maintain a government security clearance.
• 5+ years in cybersecurity with hands-on testing and red-team operations.
• Experience with threat modeling methodologies at scale (STRIDE or equivalent).
• Experience planning and executing technical security assessments and red-team engagements.
• Deep technical experience across Windows and Linux environments.
• Knowledge of attack techniques, vulnerabilities, and defensive controls.
• Cloud architecture and security concepts across AWS, Azure, and GCP.
• Ability to document findings, evidence, and remediation actions.
• Strong analytical, problem-solving, and communication skills.

Responsibilities

• Develop threat models to identify threats, attack vectors, and risks.
• Plan and execute red-team/adversarial security assessments aligned to objectives.
• Perform penetration testing to validate vulnerabilities and exploit paths.
• Evaluate security controls and effectiveness against criteria.
• Document findings with evidence and remediation recommendations.
• Collaborate with security, infra, cloud, engineering, and architecture teams.
• Validate remediation through follow-up testing.
• Maintain awareness of evolving threats and techniques.
• Support development of red-team methodologies and criteria.
• Communicate risks and remediation steps to stakeholders.

Skills

Adversarial security testing

Threat modeling

Penetration testing

Cloud security

Security testing frameworks

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering, or related field

Tools

AWS

Azure

GCP

Job description

Steampunk is seeking a Red-Team / Adversarial Security Lead to plan and execute threat-based assessments across enterprise environments. You will develop threat models, conduct adversarial testing, and evaluate security controls to support pass/fail safety gating.

You will collaborate with cybersecurity, infrastructure, cloud, engineering, and architecture teams, document findings with evidence, and drive remediation verification across Windows, Linux, and cloud platforms.