Senior Red Team Engineer — Offensive Security Lead

Williams-Sonoma, Inc.; New York (NY); Presencial; USD 120.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Employee discount

401(k) plan

Paid time off

Health benefits

Commuter benefits

Wellness program

Descripción de la vacante

Williams-Sonoma, Inc. is seeking a Senior Information Security Engineer – Security Red Team to lead authorized offensive engagements from planning to remediation validation. This hands-on role coordinates internal Red Team resources and external partners while translating findings into risk reduction.

You will mentor engineers, develop reusable methodologies, and drive automated analysis opportunities in a security-first enterprise environment in Brooklyn, NY.

Formación

• 5+ years of experience in offensive security, penetration testing, Red Team operations, or related security engineering.
• Experience leading authorized security assessments and communicating findings to varied audiences.
• Hands-on knowledge of enterprise identity, networking, operating systems, cloud platforms, and web application security.
• Experience documenting scope, safety controls, evidence, and actionable remediation guidance.
• Ability to coordinate cross-functional engagements and lead technical work without direct-report authority.
• Experience with Purple Team exercises and mapping observations to MITRE ATT&CK preferred.
• Relevant offensive security certifications or experience with scripting and assessment automation preferred.

Responsabilidades

• Plan and lead authorized internal and external penetration tests, adversary simulations, and Red Team engagements across enterprise environments.
• Define engagement scope, objectives, rules of engagement, written authorization, testing windows, safety controls, and communication plans to minimize production disruption.
• Coordinate internal Red Team engineers and external penetration-testing vendors, including deliverables and follow-up testing.
• Conduct or direct assessments of Active Directory and identity attack paths, cloud environments, web applications, APIs, and infrastructure.
• Lead Purple Team exercises with SOC and Detection Engineering to validate visibility, detection coverage, and response effectiveness.
• Conduct authorized social engineering assessments in accordance with approved scope and company policy.
• Apply tools such as Cobalt Strike, BloodHound Enterprise, Burp Suite, Metasploit, and Kali Linux where appropriate to approved engagements.
• Produce clear technical reports and executive-level summaries that explain exposure, business impact, evidence, and prioritized remediation recommendations.
• Coordinate remediation follow-up, validation, and retesting with application, infrastructure, and security owners.
• Mentor team members, develop reusable engagement methodologies, and identify safe opportunities for automation and AI-assisted analysis.

Conocimientos

Offensive security

Penetration testing

Red Team operations

Leadership without mgmt

Cobalt Strike

BloodHound Enterprise

Burp Suite

Metasploit

Kali Linux

Purple Team

MITRE ATT&CK

SOC collaboration

Herramientas

Cobalt Strike

BloodHound Enterprise

Burp Suite

Metasploit

Kali Linux

Descripción del empleo

Williams-Sonoma, Inc. is seeking a Senior Information Security Engineer – Security Red Team to lead authorized offensive engagements from planning to remediation validation. This hands-on role coordinates internal Red Team resources and external partners while translating findings into risk reduction.

You will mentor engineers, develop reusable methodologies, and drive automated analysis opportunities in a security-first enterprise environment in Brooklyn, NY.