Lead Red Team & Offensive Security Engineer

DRW; Chicago (IL); Sur place; USD 175 000 - 275 000; Plein temps

Avantages offerts par ce poste

Medical insurance

Dental insurance

Vision insurance

401k with employer match

Disability insurance

Life and AD&D insurance

Health savings accounts

Flexible spending accounts

Annual discretionary bonus

Résumé du poste

DRW, a diversified trading firm based in Chicago, seeks a Senior Offensive Security Engineer to lead red team engagements, adversary simulations, and vulnerability testing across trading systems, corporate IT, and cloud platforms. You’ll develop tooling, coordinate with Security Engineering and SOC, and drive improvements to make DRW harder to compromise.

Ideal candidates have 5+ years in offensive security, strong scripting, and deep knowledge of MITRE ATT&CK, with experience in AI/ML security

Qualifications

• 5+ years of hands-on offensive security, pentesting, or red teaming across full engagement lifecycle.
• Strong scripting or programming ability for offensive tooling.
• Solid understanding of networking fundamentals, Windows, macOS, and Linux internals, identity providers, and cloud platforms.
• Practical experience with common offensive security tools (e.g., Cobalt Strike, Metasploit, BloodHound, Burp Suite, Nmap) and a track record of building your own when the situation calls for it.
• Working knowledge of the MITRE ATT&CK framework, adversary emulation, and detection evasion techniques, along with enough understanding of defensive controls and tooling to help defenders improve.
• A track record of clear, precise reporting and communication and you can translate technical findings into risk that both engineers and executives understand.
• Experience with smart contract auditing and blockchain security.
• Familiarity with AI/ML security risks, including adversarial attacks on models, prompt injection, and the offensive and defensive implications of LLM-powered tooling.
• A collaborative mindset: you see red teaming as a way to make the whole organization more secure, not just to find flaws.

Responsabilités

• Plan and execute red team engagements and adversary simulations against trading systems, corporate IT, and cloud environments, modeling realistic attacker tactics, techniques, and procedures (TTPs) mapped to frameworks such as MITRE ATT&CK.
• Conduct penetration tests across networks, web and internal applications, APIs, and cloud infrastructure, and report findings with clear, actionable remediation guidance.
• Design and build custom tooling, scripts, and exploits to emulate adversary behavior, test control effectiveness, and validate detection coverage.
• Partner with the Security Engineering and SOC teams in purple-team exercises to close gaps between what attackers can do and what defenders can see.
• Run social engineering and phishing simulations to assess and improve organizational security awareness.
• Identify, validate, prioritize, and track vulnerabilities and control weaknesses through to remediation in collaboration with infrastructure, platform, and application owners.
• Present engagement results and risk narratives to both technical teams and senior leadership in a way that drives action.
• Stay current on the threat landscape, emerging TTPs, and offensive tooling, and bring that knowledge back into DRW’s defenses.
• Assess the security of AI and LLM-integrated systems, including prompt injection, model manipulation, data poisoning, and abuse of agentic workflows, and work with teams building these systems to harden them.
• Leverage AI-assisted tooling to accelerate reconnaissance, vulnerability discovery, and exploit development, and evaluate new AI-powered offensive techniques as they emerge.
• Help define and mature DRW’s offensive security methodology, standards, and tooling, and mentor other engineers on the security team.

Connaissances

Scripting

Programming

Networking

OS fundamentals

Threat modeling

Outils

Cobalt Strike

Metasploit

BloodHound

Burp Suite

Nmap

Description du poste

DRW, a diversified trading firm based in Chicago, seeks a Senior Offensive Security Engineer to lead red team engagements, adversary simulations, and vulnerability testing across trading systems, corporate IT, and cloud platforms. You’ll develop tooling, coordinate with Security Engineering and SOC, and drive improvements to make DRW harder to compromise.

Ideal candidates have 5+ years in offensive security, strong scripting, and deep knowledge of MITRE ATT&CK, with experience in AI/ML security