Senior Red-Team Lead: Adversarial Security & Threat Modeling

Steampunk, Inc.; McLean (VA); On-site; USD 85,000 - 170,000; Full time

Job summary

Steampunk, Inc. is seeking a Red-Team / Adversarial Security Lead to plan and execute assessments across enterprise environments. You will develop threat models, identify attack paths, run red-team plans, and evaluate security controls.

You will analyze findings, communicate risks, and support pass/fail safety-gate determinations using established security criteria across Windows, Linux, and cloud environments (AWS, Azure, GCP).

Qualifications

• Ability to obtain and maintain a government security clearance.
• Bachelor’s degree in Cybersecurity, CS, IT, Engineering, or equivalent.
• 5+ years in cybersecurity with hands-on pentesting/red-team experience.
• Experience with threat modeling frameworks (STRIDE or similar).
• Experience planning and executing security assessments and tests.
• Deep technical experience with Windows and Linux.
• Knowledge of cloud security across AWS, Azure, GCP.
• Strong analytical and communication skills.

Responsibilities

• Develop threat models to identify threats, attack vectors, vulnerabilities, and risks across systems and environments.
• Develop and execute red-team and adversarial assessment plans based on defined objectives and security criteria.
• Perform penetration testing and adversarial testing to identify vulnerabilities and attack paths.
• Evaluate the effectiveness of existing security controls through technical testing and adversarial techniques.
• Communicate vulnerabilities and remediation recommendations to technical teams and stakeholders.
• Collaborate with cybersecurity, infrastructure, cloud, engineering, and architecture teams to understand systems and evaluate risks.

Skills

Threat modeling

Red-team

Penetration testing

Adversarial testing

Cloud security

Security assessment

Communication

Threat detection

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Tools

Metasploit

Nessus

Burp Suite

Cobalt Strike

AWS

Azure

GCP

Job description

Steampunk, Inc. is seeking a Red-Team / Adversarial Security Lead to plan and execute assessments across enterprise environments. You will develop threat models, identify attack paths, run red-team plans, and evaluate security controls.

You will analyze findings, communicate risks, and support pass/fail safety-gate determinations using established security criteria across Windows, Linux, and cloud environments (AWS, Azure, GCP).