Adversary-Emulation Lead Engineer

State Street; Boston (MA); On-site; USD 120,000 - 202,500; Full time

Job summary

State Street is seeking a senior Red Team Lead Engineer to guide and execute adversary-emulation activities across enterprise systems, cloud services, and critical infrastructure. You will ensure testing aligns with regulatory expectations and organizational standards, advancing detection, prevention, and incident‑response capabilities.

The role requires deep technical expertise in identity, data protection, cloud security, and threat intelligence, with leadership in scenario development,

Qualifications

• Bachelor’s degree or equivalent advanced security experience.
• 4–6 years leading and/or conducting penetration testing or red-team activities.
• Strong knowledge of threat-informed testing and attack frameworks.
• Experience coordinating with defensive teams to evaluate detections.
• Ability to script and automate tasks using common languages.
• Exceptional communication and reporting skills for diverse audiences.

Responsibilities

• Lead and oversee adversary-emulation activities to assess defenses and control effectiveness.
• Oversee security assessments across applications, infrastructure, cloud, and enterprise technologies.
• Guide team members, assign work, and review testing approaches for quality and safety.
• Collaborate with security, technology, and risk stakeholders to design realistic, threat-informed testing scenarios.
• Evaluate detection and response capabilities and drive improvements through purple-team efforts.
• Develop and refine testing methodologies, tooling standards, and reporting practices to mature the program.
• Deliver audit-ready reports and provide guidance on remediation to reduce identified risks.

Skills

Penetration testing leadership

Red-team operations

Threat-informed testing

Scripting languages

Education

Bachelor’s degree or equivalent advanced security experience

Job description

State Street is seeking a senior Red Team Lead Engineer to guide and execute adversary-emulation activities across enterprise systems, cloud services, and critical infrastructure. You will ensure testing aligns with regulatory expectations and organizational standards, advancing detection, prevention, and incident‑response capabilities.

The role requires deep technical expertise in identity, data protection, cloud security, and threat intelligence, with leadership in scenario development,