Senior Red Team Security Engineer

S&P Global Inc.; Colorado; On-site; USD 120,000 - 155,000; Full time

Benefits offered by this job

Health care coverage

Generous time off

Learning opportunities

Retirement savings program

Family perks

Job summary

S&P Global Inc. is seeking an experienced offensive security professional in Colorado to simulate real-world threats and strengthen defenses. You will lead red team operations, collaborate with purple teams, and design breach simulations to identify gaps and improve controls.

The role emphasizes independent work with cross-functional collaboration, applying AI to attack chains and leveraging MITRE ATT&CK to emulate threat actors. Compensation aligns with market and location.

Qualifications

• Excellent communications, able to translate tech concepts to non-technical audiences.
• 5+ years in offensive security, purple/ red team operations.
• Proficient with Red Teaming frameworks and tools (commercial and open-source).
• Strong knowledge of networks, OS (Windows, Linux, Mac), Entra/AD and cloud platforms (AWS/Azure/GCP).
• Skilled in scripting languages (Python, PowerShell, Bash, JavaScript).
• Experience leveraging AI in attack chains.
• Familiar with Threat Intelligence, threat actors and MITRE ATT&CK.
• Security certifications such as GIAC RTP/RTO/OSCP/GPEN.

Responsibilities

• Conduct red team engagements simulating advanced threats against the infrastructure and apps.
• Execute purple team exercises with defensive security teams to improve detection and response.
• Design and run breach/attack simulations to uncover gaps and validate controls.
• Develop custom attack tools to test resilience and stay ahead of threats.
• Partner with development and infra teams to provide remediation guidance.

Skills

Communications

Offensive security

Red Team tools

Network concepts

Scripting languages

AI in security

MITRE ATT&CK

SIEM

DevSecOps CI/CD

IAM

Threat intelligence

Independence

Education

GIAC RTP/RTO/OSCP/GPEN

Tools

Red Team frameworks

Job description

S&P Global Inc. is seeking an experienced offensive security professional in Colorado to simulate real-world threats and strengthen defenses. You will lead red team operations, collaborate with purple teams, and design breach simulations to identify gaps and improve controls.

The role emphasizes independent work with cross-functional collaboration, applying AI to attack chains and leveraging MITRE ATT&CK to emulate threat actors. Compensation aligns with market and location.