Red Team Lead & Threat Research Engineer

JFrog Ltd; United States; On-site; USD 180,000 - 260,000; Full time

Job summary

JFrog Ltd. is seeking an Offensive Security Engineer to spearhead offensive security operations, lead Red Team exercises, simulate real-world attacks, and identify security weaknesses across JFrog’s systems and applications.

You will mentor a team of security professionals, collaborate with security engineering, DevOps, and software development teams, and develop tooling to automate Red Team efforts while advancing threat research and incident response capabilities.

Qualifications

• 7+ years in offensive security operations, Red Teaming, threat hunting or threat research.
• Knowledge of attack techniques, TTPs (Tactics, Techniques, and Procedures), adversary simulations, and threat-hunting methodologies.
• Hands-on experience with Red Team tools, frameworks (e.g., Metasploit, Cobalt Strike, Burp Suite), and custom exploit development
• Strong experience with cloud platforms (AWS, GCP, Azure) and containerized environments (Kubernetes, Docker)
• Familiarity with the MITRE ATT&CK Framework and its application in Red Team and threat-hunting scenarios
• Proficiency with scripting and automation languages for tool development, threat detection, and attack simulation
• Solid understanding of offensive security best practices, vulnerability management, threat detection, and advanced threat analysis
• Ability to effectively communicate and collaborate with cross-functional teams, translating complex security concepts into actionable insights
• A passion for continuous learning, research, and innovation in the fields of offensive security, threat hunting, and cyber threats

Responsibilities

• Lead, plan, design, and execute Red Team operations, threat modeling, and adversarial simulations against JFrog’s infrastructure and cloud environments.
• Drive threat research and intelligence initiatives to stay ahead of emerging cyber threats, attack techniques, and vulnerabilities.
• Develop and execute advanced attack scenarios to assess security defenses and provide actionable recommendations for improving JFrog’s security posture.
• Collaborate closely with security engineering, DevOps, and software development teams to implement findings and enhance our defenses.
• Lead the development of tooling, frameworks, and methodologies to automate and optimize Red Team exercises.
• Mentor and guide a team of security professionals, fostering a culture of innovation, collaboration, and continuous learning.
• Participate in incident responses when Red Team exercises reveal vulnerabilities, providing expertise on attack techniques, forensics, and post-attack mitigation.
• Continuously assess and improve security processes, playbooks, and threat detection mechanisms.

Skills

Red Teaming

Threat hunting

Threat research

Attack techniques

Automation scripting

Communication

Continuous learning

Tools

Metasploit

Cobalt Strike

Burp Suite

Docker

Kubernetes

Job description

JFrog Ltd. is seeking an Offensive Security Engineer to spearhead offensive security operations, lead Red Team exercises, simulate real-world attacks, and identify security weaknesses across JFrog’s systems and applications.

You will mentor a team of security professionals, collaborate with security engineering, DevOps, and software development teams, and develop tooling to automate Red Team efforts while advancing threat research and incident response capabilities.