Senior Red Team Operator | Adversary Emulation & AI Security

Citizens Bank; Westwood (MA); Hybrid; USD 120,000 - 210,000; Full time

Benefits offered by this job

Medical benefits and retirement plan

Education reimbursement

Job summary

Citizens Bank is seeking a Principal Operator, Red Team to lead hands-on adversary emulation across cloud, on-prem, and AI-enabled environments, strengthening offensive security and threat readiness.

In this hybrid role, you will design campaign-based attack operations, perform deep exploitation, and collaborate with Blue Team and Detection Engineering to translate findings into measurable risk reductions across the enterprise.

Qualifications

• Hands-on cybersecurity experience with a focus on Red Team operations, adversary emulation, or offensive security.
• Experience executing Red Team or Purple Team engagements in assumed breach scenarios.
• Ability to design and execute attack paths and not rely solely on automated tools.
• Technical capability across identity, endpoint, network, cloud, SaaS, and C2.
• Familiarity with AI enabled systems and how AI can be manipulated.
• Strong collaboration with Blue Team and Detection Engineering to improve detection/response.
• Excellent documentation, engagement constraint adherence, and communication.
• Willingness to commute to hub locations for hybrid schedule.

Responsibilities

• Execute Red Team and Purple Team engagements with adversary emulation and assumed breach scenarios.
• Design and execute campaign-based attack operations across enterprise environments.
• Perform hands-on exploitation across on-prem, cloud, SaaS, and hybrid infrastructures.
• Simulate attacker tradecraft including living off the land, identity abuse, privilege escalation, lateral movement, persistence, C2, and data exfiltration.
• Conduct testing against AI-enabled systems and workflows, including AI assistant and automation abuse.
• Evaluate prompt manipulation and AI model misuse scenarios.
• Collaborate with Detection Engineering and Blue Team to validate detections and refine response.
• Translate offensive findings into remediation insights and drive risk reduction.
• Document findings clearly and contribute to engagement reports and debriefs.
• Operate within rules of engagement and ethical guidelines.
• Stay current on adversary tactics and AI security research.

Skills

Red Team operations

Adversary emulation

Offensive security

Cloud/SaaS security

AI security concepts

Education

Bachelor’s Degree in Security/CS/IT or related field

OSCP/OSEP/CRTO/CRTP or similar advanced offensive security credentials

Experience with AI security testing preferred

Job description

Citizens Bank is seeking a Principal Operator, Red Team to lead hands-on adversary emulation across cloud, on-prem, and AI-enabled environments, strengthening offensive security and threat readiness.

In this hybrid role, you will design campaign-based attack operations, perform deep exploitation, and collaborate with Blue Team and Detection Engineering to translate findings into measurable risk reductions across the enterprise.