Senior Principal - Red Team Engineer

Hewlett Packard Enterprise Company in; Houston (TX); On-site; USD 141,000 - 325,000; Full time

Benefits offered by this job

Health & Wellness

Personal & Professional Development

Unconditional Inclusion

Job summary

Hewlett Packard Enterprise seeks a senior cybersecurity professional to lead advanced offensive security programs, including Red Team and Purple Team engagements across enterprise and cloud environments.

You will own planning and delivery, develop new testing methodologies, and drive improvements in detection and response through hands-on research and tooling development.

Qualifications

• Master’s degree and 9+ years in cybersecurity with substantial offensive focus.
• Hands-on experience in Red Team Operations or Red Team Development.
• Cloud exploitation in AWS, Azure, and GCP.
• Proficiency with Linux and Windows; macOS a plus.
• Programming and automation using Python/Go/Rust/C/C++ to automate testing and tooling.
• Experience deploying offensive infrastructure and evading controls (WAF, IDS/IPS, EDR).
• Familiarity with CI/CD security and threat emulation frameworks like MITRE ATT&CK.

Responsibilities

• Plan and execute full-scope adversary emulation campaigns across enterprise environments.
• Collaborate with purple teams to validate detections and improve coverage.
• Research and develop custom offensive security tooling and methodologies.
• Build AI-enabled workflows to automate recon, attack paths, and reporting.

Skills

Red Team Operations

Red Team Development

Exploit Development

Reverse Engineering

Detection Engineering

Penetration Testing

AI-Enabled Offensive Security

Education

Master’s degree in Cybersecurity/CS/IT

Tools

Python

Go

Rust

C/C++

Job description

Who We Are:

Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today’s complex world. Our culture thrives on finding new and better ways to accelerate what’s next. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good. If you are looking to stretch and grow your career our culture will embrace you. Open up opportunities with HPE.

Job Description:

This role provides advanced offensive cybersecurity expertise, focusing on the planning and execution of complex Red Team and Purple Team engagements. You will own the technical planning and delivery of these engagements — from scoping and test plans through execution, remediation verification, and formal reporting.

You will apply a deep technical skills and offensive security experience to identify and exploit vulnerabilities in enterprise and cloud environments, helping to strengthen defenses through hands‑on testing and analysis. This position involves driving high‑impact testing projects, developing new testing methodologies and tools, and contributing to the organization’s overall security posture by uncovering and demonstrating real‑world attack paths.

Candidates should demonstrate deep expertise in at least three domains (Red Team Operations or Red Team Development required) as well as possess practical knowledge in a minimum of two additional domains:

• Red Team Operations
• Red Team Development (evasion, implants, loaders, droppers, bypasses, etc.)
• Exploit Development and identifying zero‑days
• Reverse Engineering
• Detection Engineering
• Penetration Testing
• AI-Enabled Offensive Security

What you’ll do:

• Red Team Operations: Plan and execute full‑scope adversary emulation campaigns, conduct multi‑stage operations across enterprise environments, and apply disciplined operational trade‑craft to achieve defined objectives.
• Purple Team Operations: Partner with detection and defensive teams to validate controls, test detection coverage, and translate offensive activity into measurable defensive improvements.
• Research and Tool Development: Continuously conduct offensive security research and custom tooling development to advance team trade‑craft and operational capability.
• AI at Scale: Build and operate AI harnesses — orchestration layers and tooling around LLMs and agentic systems — that power cybersecurity operations, such as automating recon, trade‑craft, zero‑day hunting, and reporting in red team engagements to boost the speed and reach of operations.

What you need to bring:

• Hands on experience in Red Team Operations or Red Team Development. You will be expected to operate at a high level of proficiency, drawing on real‑world experience to execute disciplined, effective trade‑craft.
• Ability to take ownership of the technical planning and delivery of Red Team and Purple Team engagements — from scoping and test plans through execution, remediation verification, and formal reporting.
• Cloud exploitation: Familiarity with testing and exploiting workloads and configurations in AWS, Azure, and GCP (identity, networking, storage, serverless, IaC).
• Server & client platform familiarity: Strong experience with using and exploiting common server and client platforms. This means primarily Linux and Windows with macOS experience being a plus.
• Programming & automation: Strong programming and tooling skills using Python, Go, Rust, or C/C++ (or equivalent) to automate testing, research new attack vectors, and develop internal Red Team tools.
• Infrastructure & evasion: Experience deploying offensive infrastructure for engagements and evading/demonstrating bypasses of network and host‑based controls (WAF, IDS/IPS, EDR).
• Experience level & education: Master’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent experience. Minimum 9+ years in cybersecurity with substantial focus on offensive security.

Nice-to-have:

• Credited CVE’s, participation in bug bounty programs, security blogging, publicly available quality code or tools.
• Research & innovation: Documented history of meaningful technical research, responsible disclosure, tooling contributions, or industry‑visible findings (e.g., novel vulnerabilities, exploit techniques, or defensive improvements).
• Proof of attendance of advanced courses which don’t have an associated certification.

Preferred Certifications/Experience:

• Certifications such as OSCP, OSCE, GPEN, GWAPT, CRTP, OSWE, or equivalents.
• Experience with CI/CD and developer pipelines security (GitHub/GitLab runners, build agents, IaC scanning).
• Familiarity with threat emulation frameworks and MITRE ATT&CK, OWASP TOP 10, OWASP ASVS, OWASP WSTG, STRIDE, and mappings for web/cloud scenarios.

Deliverables & Success Metrics:

Key deliverables include high‑fidelity technical reports with PoCs (where applicable), remediation verification summaries, and tooling contributions. Success will be measured by the quality and impact of findings, remediation impact, reduction in repeat issues, and improvements to detection/response coverage.

Accessibility

HPE is committed to creating an inclusive and accessible workplace and encourages applications from all qualified individuals, including those with disabilities. If you believe you require accommodation during any stage of the application or interview process, please submit your request by completing our secure form linked here.

Note: This option is reserved for applicants needing assistance/reasonable accommodation related to a disability.

What We Can Offer You:

Health & Wellbeing

We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing.

Personal & Professional Development

We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have — whether you want to become a knowledge expert in your field or apply your skills to another division.

Unconditional Inclusion

We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good.

Let's Stay Connected:

Follow @HPECareers on Instagram to see the latest on people, culture and tech at HPE.

Job:

Information Technology

Job Level:

TCP_06

The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level.
– United States of America: Annual Salary USD 160,000 - 325,000 in California // 141,000 - 325,000 in District of Columbia & Maryland & North Carolina & Texas & Virginia & Washington
The listed salary range reflects base salary. Variable incentives may also be offered.

Information about employee benefits offered in the US can be found at https://myhperewards.com/main/new-hire-enrollment.html

HPE is an Equal Employment Opportunity/ Veterans/Disabled/LGBT employer. We do not discriminate on the basis of race, gender, or any other protected category, and all decisions we make are made on the basis of qualifications, merit, and business need. Our goal is to be one global team that is representative of our customers, in an inclusive environment where we can continue to innovate and grow together.

Hewlett Packard Enterprise is EEO Protected Veteran/ Individual with Disabilities.

HPE will comply with all applicable laws related to employer use of arrest and conviction records, including laws requiring employers to consider for employment qualified applicants with criminal histories.

HPE is committed to creating an inclusive and accessible workplace and encourages applications from all qualified individuals, including those with disabilities. If you believe you require accommodation during any stage of the application or interview process, please submit your request by completing our secure form linked here.