Senior Red Team Engineer

S&P Global; Boulder (CO); Presencial; USD 120 000 - 155 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

Retirement plan

Education program

Family perks

Employee discounts

Resumo da oferta

S&P Global in Boulder, Colorado seeks an experienced Offensive Security professional to lead red team engagements and purple team exercises, strengthening defenses against advanced threats. You will design breach simulations, develop attack tools, and collaborate with development and infrastructure teams to implement remediation, while leveraging MITRE ATT&CK and industry standards.

Candidates bring 5+ years, GIAC/OSCP/GPEN, strong communication, and the ability to work independently in a

Qualificações

• Excellent communications, able to translate technical concepts to non-technical audiences.
• 5+ years of hands-on offensive security, purple teaming or red team ops.
• Proficiency with Red Teaming frameworks/tools (commercial or open-source).
• Strong knowledge of networks, operating systems (Windows/Linux/Mac), Entra/AD, cloud platforms (AWS/Azure/GCP).
• Scripting and automation: Python, PowerShell, Bash, JavaScript, etc.
• Experience with AI in attack chains.
• Familiarity with Cyber Threat Intelligence and MITRE ATT&CK.
• GIAC RTP/RTO/OSCP/GPEN or equivalent certifications.
• Independent worker with cross-functional collaboration.

Responsabilidades

• Conduct red team engagements to simulate advanced threats against S&P Global's infrastructure and applications.
• Execute purple team exercises with defensive security teams to enhance detection and incident response capabilities.
• Design and conduct breach and attack simulations to identify security gaps and validate controls.
• Develop custom attack tools and methodologies to test security resilience.
• Partner with development and infrastructure teams to provide remediation guidance and security recommendations.

Conhecimentos

Offensive security

Red team operations

Purple team exercises

Scripting and automation

MITRE ATT&CK knowledge

Formação académica

GIAC RTP/RTO/OSCP/GPEN certifications

Ferramentas

Red Team frameworks/tools

Descrição da oferta de emprego

S&P Global in Boulder, Colorado seeks an experienced Offensive Security professional to lead red team engagements and purple team exercises, strengthening defenses against advanced threats. You will design breach simulations, develop attack tools, and collaborate with development and infrastructure teams to implement remediation, while leveraging MITRE ATT&CK and industry standards.

Candidates bring 5+ years, GIAC/OSCP/GPEN, strong communication, and the ability to work independently in a