Senior Offensive Security Engineer & Tooling Lead

ISHE; Northern (KY); Hybrid; USD 144,000 - 288,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Retirement savings

Paid time off

Wellness programs

Equity award program

Job summary

CVS Health is seeking a Principal Engineer for Offensive Operations to own and evolve the organization's offensive tooling ecosystem while leading advanced adversarial operations. This hands-on role combines red/purple team engagements with mentoring to ensure scalable, high-quality execution across the program.

You will partner with security, engineering, and threat intelligence teams to translate findings into defensive improvements and align capabilities with enterprise priorities.

Qualifications

• 10+ years of experience in Information Security and/or Cybersecurity.
• 7+ years of direct experience in offensive operations and tactics.
• 5+ years building or utilizing offensive tooling in real-world environments.
• 3+ years leading complex technical engagements.
• 3+ years in programming/scripting languages (e.g., Python, C/C++, C#, PowerShell, Golang).
• 3+ years in technical writing and post-engagement debriefs.

Responsibilities

• Lead offensive tooling development, integration, and evolution.
• Establish best practices for tooling design, automation, and standards.
• Evaluate emerging technologies for offensive operations.

Skills

Cybersecurity experience

Offensive operations

Technical leadership

Technical writing

Education

Bachelor's degree in CS or related field

Tools

Python

C/C++

C#

PowerShell

Golang

Job description

CVS Health is seeking a Principal Engineer for Offensive Operations to own and evolve the organization's offensive tooling ecosystem while leading advanced adversarial operations. This hands-on role combines red/purple team engagements with mentoring to ensure scalable, high-quality execution across the program.

You will partner with security, engineering, and threat intelligence teams to translate findings into defensive improvements and align capabilities with enterprise priorities.