Senior Security Engineer - Red Team

- Over 5 years of experience using industry-standard penetration testing and adversary emulation tools (e.g., Cobalt Strike, Sliver, Mythic, Bloodhound, Burp Suite) - In-depth knowledge of the MITRE ATT&CK Framework and advanced evasion techniques to circumvent modern security measures - Strong understanding of the cyber kill chain and the entire lifecycle of an Advanced Persistent Threat (APT) focusing on financial institutions - Proficient in at least one scripting language (e.g., Python, PowerShell) and familiar with a compiled language (e.g., Go, C#) for tool development - Extensive experience in attacking and securing complex cloud, on-premises, and hybrid environments from initial access through execution of objectives - Solid grasp of Windows and Linux system hardening practices, Purple Team automation approaches, and vulnerability assessment techniques - Documented experience with security strategies within at least one major cloud provider (e.g., AWS, Azure, Google Cloud Platform) - Previous hands-on experience in conducting sophisticated adversary emulations/simulations within the financial services sector - A recognized offensive security certification (e.g., OSCP, GPEN, GXPN, OSWE, eCPTX) demonstrating specialized skills - Familiarity with modern enterprise security standards and frameworks (e.g., TIBER-EU, CBEST, NIST CSF) - Experience in offensive security exercises targeting emerging technologies such as AI/ML systems or macOS.