Senior Threat Emulation Engineer

You’ll run adversary emulation campaigns against enterprise infrastructure - replicating the tradecraft of real threat actors, not just running scanners and handing over a report. Pen tests, web app assessments, threat modeling, exploit research against our own stack. You find the path in before someone else does.

When you break something, you’ll write it up so it actually gets fixed: what you did, why it worked, what it means in business terms, and how to close it. You’ll work directly with detection and response teams so your findings sharpen their rules - your attacks make the defense better, but you’re not the one writing signatures.

You’ll also mentor junior offensive talent and stay current on emerging tradecraft, because the job is emulating what attackers do now, not what they did three years ago.

• 5+ years in security with real offensive depth: penetration testing, adversary emulation, web app exploitation, vulnerability research
• You’ve worked from threat intel - taking actual actor TTPs and reproducing them, not just running Cobalt Strike defaults
• You can read an environment, find the weak points, and chain them
• You can explain your kill chain to a non-technical audience without losing them
• Degree in a related field or the experience that makes it irrelevant

Strongly preferred:

• OSCP, OSWE, OSEP, or equivalent - certs from the practical, hands-on-keyboard side
• Large enterprise experience, especially regulated environments

If your background is SOC, detection engineering, or vuln management and you’re looking to move offensive - this isn’t the transition role. We need someone already doing this work.

Pulled from the full job description

• Parental leave
• 401(k)
• Health insurance
• Retirement plan
• 401(k) matching
• Paid time off
• Vision insurance, * 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Parental leave
• Relocation assistance
• Retirement plan
• Vision insurance