Sr Information Security Engineer - Security Red Team

Williams-Sonoma, Inc.; New York (NY); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Employee discount

401(k) plan

Paid time off

Health benefits

Commuter benefits

Wellness program

Job summary

Williams-Sonoma, Inc. is seeking a Senior Information Security Engineer – Security Red Team to lead authorized offensive engagements from planning to remediation validation. This hands-on role coordinates internal Red Team resources and external partners while translating findings into risk reduction.

You will mentor engineers, develop reusable methodologies, and drive automated analysis opportunities in a security-first enterprise environment in Brooklyn, NY.

Qualifications

• 5+ years of experience in offensive security, penetration testing, Red Team operations, or related security engineering.
• Experience leading authorized security assessments and communicating findings to varied audiences.
• Hands-on knowledge of enterprise identity, networking, operating systems, cloud platforms, and web application security.
• Experience documenting scope, safety controls, evidence, and actionable remediation guidance.
• Ability to coordinate cross-functional engagements and lead technical work without direct-report authority.
• Experience with Purple Team exercises and mapping observations to MITRE ATT&CK preferred.
• Relevant offensive security certifications or experience with scripting and assessment automation preferred.

Responsibilities

• Plan and lead authorized internal and external penetration tests, adversary simulations, and Red Team engagements across enterprise environments.
• Define engagement scope, objectives, rules of engagement, written authorization, testing windows, safety controls, and communication plans to minimize production disruption.
• Coordinate internal Red Team engineers and external penetration-testing vendors, including deliverables and follow-up testing.
• Conduct or direct assessments of Active Directory and identity attack paths, cloud environments, web applications, APIs, and infrastructure.
• Lead Purple Team exercises with SOC and Detection Engineering to validate visibility, detection coverage, and response effectiveness.
• Conduct authorized social engineering assessments in accordance with approved scope and company policy.
• Apply tools such as Cobalt Strike, BloodHound Enterprise, Burp Suite, Metasploit, and Kali Linux where appropriate to approved engagements.
• Produce clear technical reports and executive-level summaries that explain exposure, business impact, evidence, and prioritized remediation recommendations.
• Coordinate remediation follow-up, validation, and retesting with application, infrastructure, and security owners.
• Mentor team members, develop reusable engagement methodologies, and identify safe opportunities for automation and AI-assisted analysis.

Skills

Offensive security

Penetration testing

Red Team operations

Leadership without mgmt

Cobalt Strike

BloodHound Enterprise

Burp Suite

Metasploit

Kali Linux

Purple Team

MITRE ATT&CK

SOC collaboration

Tools

Cobalt Strike

BloodHound Enterprise

Burp Suite

Metasploit

Kali Linux

Job description

Job Description

About the Team

You will be part of the Enterprise Cyber Security organization responsible for evaluating the effectiveness of security controls and identifying opportunities to strengthen enterprise defenses. The Red Team works closely with Security Operations, Detection Engineering, Security Engineering, and business partners to assess realistic attack paths and improve resilience.

About The Role

As a Senior Information Security Engineer - Security Red Team, you will lead authorized offensive security engagements from planning through execution, reporting, and remediation validation. This is a hands‑on technical lead role responsible for coordinating internal Red Team resources and external testing partners, translating technical findings into actionable risk reduction, and mentoring other engineers without formal people‑management responsibilities.

Responsibilities

• Plan and lead authorized internal and external penetration tests, adversary simulations, and Red Team engagements across enterprise environments.


• Define engagement scope, objectives, rules of engagement, written authorization, testing windows, safety controls, and communication plans to minimize production disruption.


• Coordinate internal Red Team engineers and external penetration‑testing vendors, including deliverables and follow‑up testing.


• Conduct or direct assessments of Active Directory and identity attack paths, cloud environments, web applications, APIs, and infrastructure.


• Lead Purple Team exercises with SOC and Detection Engineering to validate visibility, detection coverage, and response effectiveness.


• Conduct authorized social engineering assessments in accordance with approved scope and company policy.


• Apply tools such as Cobalt Strike, BloodHound Enterprise, Burp Suite, Metasploit, and Kali Linux where appropriate to approved engagements.


• Produce clear technical reports and executive‑level summaries that explain exposure, business impact, evidence, and prioritized remediation recommendations.


• Coordinate remediation follow‑up, validation, and retesting with application, infrastructure, and security owners.


• Mentor team members, develop reusable engagement methodologies, and identify safe opportunities for automation and AI‑assisted analysis.

Criteria

• 5+ years of experience in offensive security, penetration testing, Red Team operations, or related security engineering.


• Demonstrated experience leading authorized security assessments and communicating findings to varied audiences.


• Hands‑on knowledge of enterprise identity, networking, operating systems, cloud platforms, and web application security.


• Experience documenting scope, safety controls, evidence, and actionable remediation guidance.


• Ability to coordinate cross‑functional engagements and lead technical work without direct‑report authority.


• Experience with Cobalt Strike, BloodHound Enterprise, Burp Suite, Metasploit, and Kali Linux preferred.


• Experience conducting Purple Team exercises and mapping observations to MITRE ATT&CK preferred.


• Relevant offensive security certifications or experience with scripting and assessment automation preferred.


• This role requires being onsite in the Brooklyn, NY office Monday through Thursday.

Our Culture & Values

We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.

People First

Putting People First means investing in overall well‑being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available:

Benefits

• A generous discount on all WSI brands


• A 401(k) plan and other investment opportunities


• Paid vacations, holidays, and time off to volunteer


• Health benefits, dental and vision insurance, including same‑sex domestic partner benefits


• Tax‑free commuter benefits


• A wellness program that supports your physical, financial and emotional health

Continued Learning

• In‑person and online learning opportunities through WSI University


• Cross‑brand and cross‑function career opportunities


• Resources for self‑development


• Advisor (Mentor) program


• Career development workshops, learning programs, and speaker series

WSI will not now or in the future commence an immigration case or \"sponsor\" an individual for this position (for example, H-1B or other employment‑based immigration).

This role is not eligible for relocation assistance.

Williams‑Sonoma, Inc. is an Equal Opportunity Employer. Williams‑Sonoma, Inc. will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance, or other applicable state or local laws and ordinances.

The expected starting pay range for this position is $120,000 - $150,000. Applicable pay ranges may differ across markets. Actual pay will be determined based on experience and other job‑related factors permitted by law. In addition to competitive pay, compensation may include a variety of other components like benefits, paid time off, merit, and bonus opportunities.

About Us

Our Company

Founded in 1956, Williams‑Sonoma, Inc. is the premier specialty retailer of high‑quality products for the kitchen and home in the United States. Our family of brands are Williams Sonoma, Williams Sonoma Home, Pottery Barn, Pottery Barn Kids, Pottery Barn Teen, Rejuvenation, West Elm, Mark & Graham, Outward, and GreenRow. These brands are among the best known and most respected in the industry. We offer beautifully‑designed, stylish and functional products for every area of the home, including the kitchen, living room, bedroom, home office, closet, laundry room and even outdoor spaces. We've seen some big changes since our first brick‑and‑mortar store opened more than half of a century ago. What hasn't changed is our passion for high‑quality products, functional design, outstanding customer service, and enhancing the lives of our customers and the communities where we operate. Today, we’re a multi‑brand, multi‑channel, global enterprise supported by state‑of‑the‑art technology and some of the most talented teams in retailing - and we’re always looking for new energy and ideas.