Senior Offensive Security Engineer

S&P Global; Dallas (TX); On-site; USD 120,000 - 155,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Job summary

S&P Global is seeking a Senior Offensive Security Engineer to lead red and purple team engagements from our Boulder, CO location. You will simulate real-world attacks, design breach scenarios, and develop advanced tools to test defenses, while collaborating with engineering and infrastructure teams to close gaps.

The role emphasizes cross-functional teamwork, ongoing learning, and delivering actionable security improvements in a dynamic enterprise environment.

Qualifications

• 5+ years of hands-on offensive security, red team or purple team engagements.
• Strong knowledge of networks, operating systems, and cloud platforms (AWS/Azure/GCP).
• Experience with scripting for automation (Python/PowerShell/Bash).
• Familiarity with MITRE ATT&CK and threat actor emulation.

Responsibilities

• Conduct red team engagements to simulate advanced threats against S&P Global's infrastructure and applications.
• Execute purple team exercises with defensive teams to enhance detection, response and resiliency.
• Design and conduct breach simulations to identify gaps and validate controls.
• Develop custom attack tools and methodologies to test resilience and stay ahead of threats.
• Partner with development and infrastructure teams to provide remediation guidance.

Skills

Red Teaming

Purple Teaming

Offensive Security

Network & System Security

Scripting/Automation

MITRE ATT&CK

Cloud Platforms

Threat Intelligence

Job description

S&P Global is seeking a Senior Offensive Security Engineer to lead red and purple team engagements from our Boulder, CO location. You will simulate real-world attacks, design breach scenarios, and develop advanced tools to test defenses, while collaborating with engineering and infrastructure teams to close gaps.

The role emphasizes cross-functional teamwork, ongoing learning, and delivering actionable security improvements in a dynamic enterprise environment.