Cloud Red Team Engineer - Adversary Emulation

Hidden Jobs; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

RSUs

Health insurance

PTO

Retirement plan

Job summary

Hidden Jobs is seeking a red team engineer embedded in our product security team to drive offensive security across cloud environments, focusing on adversary emulation, attack-path discovery, and validating detection capabilities.

You will plan and execute red team operations, assess cloud infrastructure, IAM misconfigurations, and CI/CD security; collaborate with blue teams to test detection coverage and incident response, and stay current with attacker techniques.

Qualifications

• Experience in offensive security with real-world red team engagements.
• Ability to map findings to MITRE ATT&CK framework.
• Proven report writing with concise, actionable outputs.
• Clear communication with varied stakeholders.

Responsibilities

• Plan and execute red team operations, adversary simulations, and security assessments in cloud environments.
• Evaluate security of cloud infrastructure, IAM, CI/CD, containers, and cloud-native services.
• Identify and validate attack paths from IAM misconfigurations to exposed secrets and weak cloud config.
• Test detection and response coverage by exercising logging, alerts, and incident response with blue teams.
• Track emerging attacker techniques and cloud exploitation trends for enterprise relevance.

Skills

Offensive security

Red team ops

Threat emulation

Adversary emulation

Report writing

Stakeholder comms

Education

OSCP

OSEP

GXPN

GPEN

Cloud security cert

Job description

Hidden Jobs is seeking a red team engineer embedded in our product security team to drive offensive security across cloud environments, focusing on adversary emulation, attack-path discovery, and validating detection capabilities.

You will plan and execute red team operations, assess cloud infrastructure, IAM misconfigurations, and CI/CD security; collaborate with blue teams to test detection coverage and incident response, and stay current with attacker techniques.