IT Offensive Security Engineer III (Must Reside in Texas)

Randolph-Brooks Federal Credit Union; San Antonio (TX); Híbrido; USD 130.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

401(k) with matching

Medical, vision and dental

Tuition reimbursement

Life insurance

Paid time off

Parental leave

Wellness program

Descripción de la vacante

Randolph-Brooks Federal Credit Union is seeking an Offensive Security Engineer III to lead adversary-emulation campaigns across identity, endpoints, networks, apps, and cloud environments. You will design engagement plans, safety controls, and deconfliction for complex multi-stage exercises while mentoring peers and translating findings into actionable improvements.

The role supports a hybrid work schedule after training and requires Texas residency with home‑office readiness.

Formación

• Bachelor's degree or equivalent in a related field.
• 3–5 years in adversary emulation, red team ops, or advanced security assessments.
• Experience leading multi‑domain adversary emulations across enterprise tech stacks.
• Strong communication and leadership for senior stakeholder engagement.

Responsabilidades

• Lead complex adversary-emulation campaigns across domains (identity, endpoints, cloud, apps, data).
• Design rules of engagement, safety controls, and deconfliction plans for live exercises.
• Develop custom tooling, payloads, and automation for engagements.
• Produce executive narratives linking attack paths to business risk and remediation priorities.
• Mentor engineers and lead lessons‑learned to improve engagement realism and safety.

Conocimientos

Adversary emulation

Red team operations

Threat modeling

Stakeholder engagement

Educación

Bachelor's degree in Computer Science, MIS, Cybersecurity, IT

Herramientas

Python

Go

C#

C/C++

Rust

PowerShell

JavaScript

APIs

Infrastructure automation

Descripción del empleo

Job Description and Requirements

Randolph-Brooks Federal Credit Union is currently searching for an experienced and talented Offensive Security Engineer III to join our amazing IT Security team! The Offensive Security Engineer III will have the ability to work a hybrid schedule (remote/onsite) after a period of training (time frame may vary). Training will take place at the RBFCU Administrative Service Center: 1 Ikea-RBFCU Pkwy, Live Oak, Texas 78233. All applicants must reside within the state of Texas and have the capability of performing all of the work from their home in Texas. To successfully work from home, employees must have access to a minimum internet connection as noted by RBFCU. Must have a reliable home internet provider and the ability to hard wire a connection directly to modem (Ethernet cable provided). Must be able to provide a workspace at home that is safe, suitable for work, and within a distraction free environment.

The Offensive Security Engineer III leads complex, intelligence-informed adversary emulations that test how well the organization’s people, processes, architecture, and technology withstand realistic multi-stage attacks. The role designs and executes campaigns across identity, endpoints, networks, applications, APIs, cloud platforms, data environments, software delivery systems, and other authorized surfaces, including controlled human-factor and physical scenarios when explicitly approved. The engineer evaluates attack-path viability and the effectiveness of preventive, detective, responsive, and recovery controls, then translates demonstrated compromise paths into systemic improvements across security and engineering. This role provides technical and engagement leadership, develops custom offensive tooling and infrastructure, manages operational risk, and coordinates closely with threat intelligence, SOC, incident response, security engineering, legal, privacy, physical security, and business stakeholders. The Senior Red Team Engineer raises the maturity of both offense and defense through purple-team collaboration, detection validation, rigorous reporting, mentorship, and repeatable assessment methods.

Essential Functions and Responsibilities

Lead complex, multi-domain adversary-emulation campaigns targeting critical services, high-value assets, privileged identities, cloud control planes, applications, data, and software delivery systems. Translate threat intelligence and business context into campaign objectives, adversary profiles, attack hypotheses, target selections, techniques, success criteria, and measurable defensive outcomes. Design engagement plans, rules of engagement, safety controls, communications, deconfliction, escalation paths, data-handling requirements, and technical workstreams. Execute and supervise advanced attack activity involving stealth, persistence, identity compromise, lateral movement, cloud privilege escalation, application exploitation, data access, and objective demonstration. Lead controlled social-engineering, physical, wireless, third-party, or assumed-breach scenarios when explicitly approved by the required business, legal, privacy, human resources, physical security, and risk authorities. Develop custom tooling, implants, payloads, test harnesses, automation, redirectors, infrastructure, and operational-security practices appropriate to authorized objectives. Evaluate defense-in-depth performance across prevention, identity, segmentation, telemetry, detection, investigation, containment, eradication, recovery, and resilience. Lead purple-team exercises and convert engagement observations into high-value detections, hunts, playbooks, architecture improvements, control validation, and remediation priorities. Produce executive and technical narratives that connect attack paths and defensive gaps to business risk, systemic causes, and prioritized corrective actions. Mentor offensive and defensive engineers, conduct technical reviews, and lead lessons‑learned activities that improve engagement safety, realism, repeatability, and impact.

Requirements

Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience. Minimum 3-5 years conducting adversary emulation, penetration testing, red team operations, or advanced security assessments. Deep hands‑on experience leading multi‑stage adversary emulations and complex assessments across several enterprise technology domains. Advanced knowledge of identity attacks, endpoint tradecraft, network protocols, application and API exploitation, cloud attack paths, persistence, command and control, evasion, and data access techniques. Experience designing rules of engagement, managing testing risk, coordinating deconfliction, protecting sensitive data, and making stop‑work decisions during live exercises. Production‑quality engineering experience using Python, Go, C#, C/C++, Rust, PowerShell, JavaScript, APIs, infrastructure automation, or comparable technologies. Experience developing or modifying offensive tools, payloads, infrastructure, attack automation, and validation methods while maintaining operational security. Advanced technical judgment to balance realism, stealth, evidence, business impact, legal and ethical boundaries, safety, and operational continuity. Strong communication, facilitation, and stakeholder engagement skills, including constructive debriefs and concise communication to senior leadership. Experience emulating advanced threat actors in hybrid and multi‑cloud environments, identity systems, software supply chains, data platforms, AI systems, or critical infrastructure. Experience with advanced application exploitation, exploit development, malware research, reverse engineering, cloud red teaming, wireless testing, or hardware security.

Skills / Certification / Licensing

Serves as a subject‑matter expert across adversary emulation, identity, applications, cloud, endpoints, networks, offensive tooling, operational security, and defensive validation. Defines engagement strategy, technical methods, safety controls, priorities, and deliverables for complex campaigns. Develops novel attack paths, adapts to mature controls, and connects demonstrated compromise to systemic technical and process causes. Influences multiple technology teams, critical services, security platforms, architectures, and program‑level defense outcomes. Builds alignment among offensive security, SOC, incident response, engineering, threat intelligence, legal, privacy, physical security, risk, and leadership. Leads significant engagements, mentors others, sets technical and safety expectations, and raises offensive and defensive quality. Establishes enterprise offensive‑security direction, leads the highest‑consequence assessments, and creates organization‑wide capabilities and trusted governance.

All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.

Careers at RBFCU

Established in 1952, Randolph-Brooks Federal Credit Union is a full‑service financial cooperative whose mission is to improve members’ economic well‑being and quality of life. With assets exceeding $19.6 billion, RBFCU serves more than 1.1 million members at branches throughout Texas and Oklahoma, and online at rbfcu.org and the RBFCU Mobile® app. Recognized for financial stability, our credit union has consistently received the highest ratings of “Five Star” and “Superior” from respected organizations that evaluate financial institutions in the United States. We’re frequently recognized as one of the best workplaces on a local and national level.

Benefits

• 401(k) with matching incentives — up to 10 percent
• Competitive pay
• Medical, vision and dental benefits available to employees and their families from the first day of employment
• Tuition reimbursement plans
• Life insurance
• Pharmacy discount programs
• Flexible Spending (FSA), Health Savings (HSA) and Dependent Care account options
• Paid time off
• Parental leave
• Company-paid benefits include: Long-term disability
• Basic life insurance
• Wellness program
• Credit‑monitoring service
• Employee assistance program
• Training and volunteer opportunities