Senior Adversary Emulation & Purple Team Engineer

CVS Health; Richmond (VA); On-site; USD 83,000 - 222,000; Full time

Benefits offered by this job

Comprehensive benefits package

Bonus eligibility

Job summary

CVS Health in Richmond, VA is seeking a Senior Adversary Operations Engineer to strengthen our security posture by executing advanced penetration testing and adversary emulation across enterprise, cloud, identity, API and application environments. You will lead engagements end-to-end, from scoping to remediation guidance, delivering actionable insights to prioritize risk-based fixes.

This role collaborates with detection engineering, SOC, and incident response teams to improve telemetry,

Qualifications

• 5+ years of hands-on experience in penetration testing, red teaming, or offensive security.
• 3+ years of experience with Kali Linux, Metasploit, Nmap, Burp Suite, or related tools.
• 3+ years of scripting experience (Python, PowerShell, Bash).
• 3+ years of experience with cloud security (AWS, Azure, GCP) and container security.

Responsibilities

• Conduct internal and external penetration tests to identify and exploit vulnerabilities.
• Develop and execute adversary emulation scenarios to assess detection and response capabilities.
• Utilize a suite of testing tools and create detailed reports with findings and remediation recommendations.
• Collaborate with blue teams to design purple team exercises and improve monitoring and response.

Skills

Penetration testing

Adversary emulation

Cloud security

Scripting languages

Security strategy

Education

Bachelor's degree

Tools

Kali Linux

Metasploit

Nmap

Burp Suite

Job description

CVS Health in Richmond, VA is seeking a Senior Adversary Operations Engineer to strengthen our security posture by executing advanced penetration testing and adversary emulation across enterprise, cloud, identity, API and application environments. You will lead engagements end-to-end, from scoping to remediation guidance, delivering actionable insights to prioritize risk-based fixes.

This role collaborates with detection engineering, SOC, and incident response teams to improve telemetry,