Senior Adversary Operations Architect

ISHE; Boise, Northern (ID, KY); Hybrid; USD 83,000 - 222,000; Full time

Job summary

CVS Health is seeking a Senior Adversary Operations Engineer to strengthen security by conducting advanced penetration tests and adversary simulations. You will lead engagements end-to-end, from scoping to remediation guidance, aligning findings with business impact and risk-based decisions.

You will collaborate with detection engineering, SOC, and incident response teams to translate offensive findings into improved telemetry, alerting, and response workflows, while leveraging threat

Qualifications

• 5+ years in penetration testing, red teaming, or offensive security.
• 3+ years with Kali Linux, Metasploit, Nmap, Burp Suite, and/or other related tools.
• 3+ years scripting languages (Python, PowerShell, Bash, etc).
• 3+ years in cloud security (AWS, Azure, GCP) and container security.

Responsibilities

• Conduct internal and external penetration tests to identify and exploit vulnerabilities.
• Develop and execute adversary emulation scenarios to assess the organization’s detection and response capabilities.
• Utilize and maintain a comprehensive suite of penetration testing tools (Kali Linux, Metasploit, Nmap, Burp Suite).
• Create detailed reports with findings and actionable remediation recommendations.
• Collaborate with blue teams to design purple team exercises and improve monitoring.

Skills

Penetration testing

Red teaming

Scripting experience

Cloud security

Container security

Education

Bachelor's degree or equivalent experience

Tools

Kali Linux

Metasploit

Nmap

Burp Suite

Custom scripts

Job description

CVS Health is seeking a Senior Adversary Operations Engineer to strengthen security by conducting advanced penetration tests and adversary simulations. You will lead engagements end-to-end, from scoping to remediation guidance, aligning findings with business impact and risk-based decisions.

You will collaborate with detection engineering, SOC, and incident response teams to translate offensive findings into improved telemetry, alerting, and response workflows, while leveraging threat