Red Team Engineer

State Street; Quincy (MA); On-site; USD 150,000 - 210,000; Full time

Job summary

State Street seeks a Red Team Engineer within the Global Cyber Security group to perform adversary-emulation, threat-informed security testing, and controlled offensive security operations. You will work in approved environments with documented processes, ensuring audit-ready outcomes.

The role requires intelligence-driven assessments of enterprise apps and critical infrastructure, evaluating detection, prevention, response, and governance capabilities, and collaborating with security and

Qualifications

• Adversary-emulation, threat-informed security testing, and controlled offensive security operations.
• Requires disciplined documentation practices to ensure decisions, activities, evidence, findings, and outcomes are clear, traceable, and audit-ready.

Responsibilities

• Contribute as a core technical member of the Red Team within Global Cyber Security.
• Assess enterprise applications, critical infrastructure components, and related security controls.
• Evaluate security posture and effectiveness of detection, prevention, response, and governance capabilities.
• Collaborate with cross-functional teams across applications, platforms, infrastructure, security leadership, threat intelligence, and security operations to execute assessments and activities.

Job description

Who We Are Looking For
As a member of the Red Team within the Global Cyber Security group, the Red Team Engineer will serve as a core technical contributor for adversary‑emulation, threat‑informed security testing, and controlled offensive security operations. The engineer will execute activities in accordance with State Street's standards and procedures, risk‑acceptance requirements, and regulatory expectations, ensuring all work is conducted within approved environments, scopes, and authorization pathways. The role also requires disciplined documentation practices so that assessment decisions, activities, evidence, findings, and outcomes are clear, traceable, and audit‑ready.

Who We Are Looking For
As a member of the Red Team within the Global Cyber Security group, the Red Team Engineer will serve as a core technical contributor for adversary‑emulation, threat‑informed security testing, and controlled offensive security operations. The engineer will execute activities in accordance with State Street's standards and procedures, risk‑acceptance requirements, and regulatory expectations, ensuring all work is conducted within approved environments, scopes, and authorization pathways. The role also requires disciplined documentation practices so that assessment decisions, activities, evidence, findings, and outcomes are clear, traceable, and audit‑ready.
The Red Team Engineer will conduct comprehensive, intelligence‑driven assessments of enterprise applications, critical infrastructure components, and associated operational and technical security controls. These assessments evaluate not only the security posture of targeted systems but also the effectiveness of the organization’s detection, prevention, response, and governance capabilities.
The Red Team Engineer will collaborate with technical experts across applications, platforms, and infrastructure, security leadership, and process stakeholders, threat intelligence and defensive analytics teams, security operations personnel, and business system owners to