Enable job alerts via email!

Adversary Research Engineer

AttackIQ

United States

Remote

USD 100,000 - 150,000

Full time

3 days ago
Be an early applicant

Boost your interview chances

Create a job specific, tailored resume for higher success rate.

Job summary

A leading cybersecurity firm seeks an Adversary Research Engineer to enhance their Breach and Attack Simulation platform. The role involves translating advanced adversary tactics and techniques into actionable simulations, requiring strong Python skills and a solid understanding of information security technologies. Ideal candidates will excel in both analytical and practical cybersecurity capacities and thrive in a collaborative team environment.

Qualifications

  • At least 4 years’ experience in offensive or defensive cybersecurity.
  • Previous roles: SOC analyst, penetration tester, or similar.
  • Strong Python development skills required.

Responsibilities

  • Produce new adversary emulations for security control evaluation.
  • Translate adversary TTPs into AttackIQ platform content.
  • Analyze and deconstruct adversarial behavior into effective emulations.

Skills

Python
Security Technologies
Adversary TTP Knowledge
Analytical Skills
Teamwork
Communication

Education

Bachelor’s degree

Tools

Kali
Metasploit
Git

Job description

As an Adversary Research Engineer, you will be responsible for producing new adversary emulations that are used to evaluate the performance of information security controls via our Breach and Attack Simulation platform. You’re aware of what the adversaries are doing today, and you’d like to create advantages for our customers and partners.

Essential Duties and Responsibilities

  • Translate analysis of adversary TTPs into the AttackIQ platform content, which is then used to evaluate the performance of security control technologies by our customers and partners.
  • Ability to analyze and deconstruct an adversary's behavior, effectively translating it into Python code for development and implementation.
  • Ability to spot patterns and trends, and to create emulations in response to emerging threats including nation state level and ecrime campaigns.
  • Work in a globally distributed team of engineers and researchers.

Professional Competencies
  • Demonstrated understanding of most commonly-deployed information security technologies to support network and endpoint defense — think Palo Alto, Proofpoint, CrowdStrike, Microsoft Defender and beyond.
  • Hands-on skill with common hacking tools, penetration testing and vulnerability scanning tools like Kali, Metasploit or similar.
  • Knowledge of current adversary TTPs and how to model behaviors in the context of MITRE ATT&CK.
  • Smart, driven, and able to think-on-your-feet in a fast-paced environment.
  • Strong team player with strong emotional intelligence, able to think outside the box and turn ideas into results
  • Have proficient working knowledge of Python data structures, algorithms, abstract classes, advanced concepts, and the ability to write clean, well-documented, and efficient Python code.
  • First-hand experience of creating custom tooling, applying enhancements and bug fixes
  • Have proficient working knowledge of git
  • Comfortable with getting into the internals of at least one operating system

Required Experience and Skills
  • Bachelor’s degree
  • At least 4 years’ experience in either an offensive or defensive cybersecurity capacity.
  • You’ve worked as one or more of the following roles: SOC analyst, IR analyst, red teamer, penetration tester, threat researcher, threat hunter, detection engineer, malware analyst, security engineer or similar.
  • Fluent in English
  • Exceptional written, oral, presentation and interpersonal skills.
  • Seasoned Python developer
  • AI/LLM experience a huge plus
  • Linux and/or macOS experience a huge plus

Note to all recruitment agencies
AttackIQ does not accept agency resumes without a signed agreement. Please do not forward resumes to our jobs alias, our employees, or any other company location. AttackIQ is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with us.

At AttackIQ we value diversity and are proud to be an equal opportunity employer.

Get your free, confidential resume review.
or drag and drop a PDF, DOC, DOCX, ODT, or PAGES file up to 5MB.

Similar jobs

Threat Detection Research Engineer (Remote)

CrowdStrike

Remote

USD 110,000 - 180,000

4 days ago
Be an early applicant