Senior Adversary Operations Engineer - Red/Purple Team

CVS Health; Atlanta (GA); On-site; USD 83,000 - 222,000; Full time

Benefits offered by this job

Bonus program

Job summary

CVS Health is seeking a Senior Adversary Operations Engineer to strengthen our security posture through advanced penetration testing and adversary simulations. You will lead engagements end-to-end, from scoping to remediation, with a focus on real-world exploitability and business impact.

You will collaborate with detection engineering, SOC, and incident response teams to translate offensive findings into measurable improvements in telemetry, alerts, and response workflows, while leveraging

Qualifications

• 5+ years of hands-on experience in penetration testing, red teaming, or offensive security.
• 3+ years of experience in Kali Linux, Metasploit, Nmap, Burp Suite, and/or other related tools.
• 3+ years of experience in scripting languages (Python, PowerShell, Bash, etc).
• 3+ years of experience with cloud security (AWS, Azure, GCP) and container security.
• Relevant certifications such as OSCP, OSCE, CISSP, CEH, or GPEN.
• Experience in managing or participating in purple team exercises.
• Familiarity with compliance standards like PCI-DSS, HIPAA, or ISO 27001.
• Strong understanding of security frameworks such as MITRE ATT&CK, NIST, and CIS.
• Strong communication skills with the ability to translate complex security issues to non-technical stakeholders.

Responsibilities

• Penetration Testing & Adversary Emulation: Conduct internal and external penetration tests to identify and exploit vulnerabilities.
• Penetration Testing & Adversary Emulation: Develop and execute adversary emulation scenarios to assess detection and response.
• Penetration Testing & Adversary Emulation: Utilize and maintain tools including Kali Linux, Metasploit, Nmap, and custom scripts.
• Penetration Testing & Adversary Emulation: Create detailed reports with findings and actionable recommendations for remediation.
• Collaboration & Purple Teaming: Work with blue teams to design purple team exercises bridging offensive and defensive security.
• Collaboration & Purple Teaming: Provide actionable insights to improve security monitoring and incident response.
• Collaboration & Purple Teaming: Facilitate knowledge-sharing sessions on adversary tactics and procedures.
• Security Strategy & Risk Management: Contribute to adversary operations strategy aligned with risk goals.
• Security Strategy & Risk Management: Provide leadership with reports on gaps, risks and control effectiveness.
• Security Strategy & Risk Management: Prioritize remediation by risk impact and feasibility.
• Tool Development & Automation: Automate penetration testing tasks using Python/PowerShell/Bash.
• Tool Development & Automation: Contribute to custom tools for red teaming and pentesting.
• Incident Response Support: Assist IR team by providing adversary insights during investigations.
• Incident Response Support: Collaborate on threat-hunting use cases and detection refinements.

Skills

Penetration testing

Red team

Scripting

Cloud security

Communication

Education

Bachelor's degree

Tools

Kali Linux

Metasploit

Nmap

Burp Suite

Python

PowerShell

Bash

Job description

CVS Health is seeking a Senior Adversary Operations Engineer to strengthen our security posture through advanced penetration testing and adversary simulations. You will lead engagements end-to-end, from scoping to remediation, with a focus on real-world exploitability and business impact.

You will collaborate with detection engineering, SOC, and incident response teams to translate offensive findings into measurable improvements in telemetry, alerts, and response workflows, while leveraging