Adversary Emulation

Adversary Emulation Cybersecurity Jobs

3 jobs found

8d ago

Security Engineer III, Red Team Operator

Deloitte Baltimore, MD

Baltimore, MD

8d ago

$111k - $218k/yr Full time Adversary Emulation Cloud Platforms Endpoint Security

Apply Now

Job Description

Security Engineer III role for Deloitte’s Cyber Defense & Resilience team, operating as an authorized red team operator to evaluate and strengthen detection, response, and resilience.

Responsibilities

Plan and execute red team operations across enterprise environments, web applications, cloud platforms, and endpoints.
Emulate advanced threat actors using realistic attack paths, tools, and techniques.
Run simulations covering reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration.
Evaluate the effectiveness of security controls, monitoring, and incident response processes.
Conduct phishing, social engineering, and credential attack exercises where authorized.
Develop custom payloads, scripts, and attack workflows to support engagements.
Document findings, attack chains, defense gaps, and remediation recommendations.
Produce after-action reports and deliver debriefs to technical and leadership stakeholders.
Partner with blue teams, detection engineers, and security leadership to improve defensive capabilities.
Follow rules of engagement, legal requirements, and operational safety requirements.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
Active Top-Secret Clearance.
Ability to work onsite up to 5 days per week.
Knowledge of network architecture, protocols, and techniques such as tunneling.
Hands-on offensive security experience in red teaming, purple teaming, or adversary simulation.
Strong understanding of enterprise attack techniques across Windows, Active Directory, Linux, cloud, and identity environments.
Experience with command and control frameworks plus techniques for privilege escalation, lateral movement, and evasion.
Proficiency with tools including Cobalt Strike, Mythic, Metasploit, BloodHound, Burp Suite, Nmap, and PowerShell or Python.
Experience with MITRE ATT&CK mapping and threat emulation.
Ability to write high-quality reports connecting technical findings to business risk.
Certified Red Team Operator (CRTO) or Offensive Security Certified Professional (OSCP).
Ability to travel 20% on average, based on work and client needs.
Must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Technologies

Cobalt Strike
Mythic
Metasploit
BloodHound
Burp Suite
Nmap
PowerShell
Python
MITRE ATT&CK
Active Directory
Windows
Linux
AWS
Azure
GCP
Havoc
Sliver
SIEM
EDR

Preferred

Experience with C2 frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.
Experience with cloud red teaming in AWS, Azure, or GCP.
Familiarity with detection engineering, SIEM, EDR, and purple team exercises.
Experience developing custom tooling or modifying public offensive tools.
Knowledge of malware analysis, reverse engineering, or exploit development.

Skills and work style

Ability to work independently and collaborate within a team.
Strong written and verbal communication skills.
Meticulous attention to detail and quality of work product.
Ability to build and sustain professional relationships.
Ability to lead projects or workstreams.
Ability to manage and prioritize multiple tasks in a fast-paced environment.
Strong interpersonal skills and professional demeanor.
Ability to meet deadlines.
Ability to provide clear guidance to others.

Team context

Deloitte Cyber supports clients with the unique challenges and opportunities businesses face in cybersecurity.
Cyber Defense & Resilience helps clients defend against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence.
Supports management and protection of dynamic attack surfaces and delivers rapid crisis and cyber incident response to enable readiness, response, and recovery from business disruptions.

Compensation and incentives

Salary range: USD 110,700 - 218,300 per year.
You may be eligible for a discretionary annual incentive program subject to program rules.
An award, if any, depends on factors including individual and organizational performance.

View full job page →

30d ago

Security Engineer III, Red Team Operator

Deloitte Baltimore, MD

Baltimore, MD

30d ago Closed

$111k - $218k/yr Full time Adversary Emulation C2 Framework Cloud Platforms

This position is no longer accepting applications (closed Sep 4, 2026).

Job Description

Security Engineer III, Red Team Operator will support authorized adversary emulation to improve detection, response, and resilience through controlled offensive testing activities.

Responsibilities

Plan and execute red team operations across enterprise environments, web applications, cloud platforms, and endpoints
Emulate advanced threat actors using realistic attack paths, tools, and techniques
Simulate reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration
Evaluate security control effectiveness, including monitoring and incident response processes
Conduct phishing, social engineering, and credential attack exercises where authorized
Develop custom payloads, scripts, and attack workflows to support engagements
Document findings, attack chains, defense gaps, and remediation recommendations
Provide after-action reports and technical debriefs to stakeholders, including leadership
Collaborate with blue teams, detection engineers, and security leadership to strengthen defensive capabilities
Maintain strict adherence to rules of engagement, legal requirements, and operational safety

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
Active Top-Secret Clearance
Ability to work onsite up to 5 days a week
Knowledge of network architecture, protocols, and techniques (including tunneling)
Hands-on offensive security experience in red teaming, purple teaming, or adversary simulation
Strong knowledge of enterprise attack techniques across Windows, Active Directory, Linux, cloud, and identity environments
Experience with command and control frameworks, privilege escalation, lateral movement, and evasion techniques
Proficiency with tools including Cobalt Strike, Mythic, Metasploit, BloodHound, Burp Suite, Nmap, and PowerShell or Python
Experience with MITRE ATT&CK mapping and threat emulation
Ability to write high-quality reports connecting technical findings to business risk
CRTO (Certified Red Team Operator) or OSCP (Offensive Security Certified Professional)
Ability to travel 20% on average
Legally authorized to work in the United States without employer sponsorship, now or at any time in the future

Technologies

Cobalt Strike
Mythic
Metasploit
BloodHound
Burp Suite
Nmap
PowerShell
Python
MITRE ATT&CK
Active Directory
Linux
Windows
Cobalt Strike (C2 Framework)
Havoc
Sliver
AWS
Azure
GCP

The Team

Cyber Defense & Resilience supports clients defending against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence
Helps manage and protect dynamic attack surfaces and provides rapid crisis and cyber incident response to enable readiness, response, and recovery from business disruptions

Preferred

Experience with C2 frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver
Experience with cloud red teaming in AWS, Azure, or GCP
Familiarity with detection engineering, SIEM, EDR, and purple team exercises
Experience developing custom tooling or modifying public offensive tools
Knowledge of malware analysis, reverse engineering, or exploit development

Location

Baltimore, MD (onsite)

Compensation

Salary range: USD 110,700 - 218,300 per year

In making compensation decisions, Deloitte considers a wide range of factors; a reasonable estimate of the current range is $110,700-$218,300, and it is not typical to hire at the top of the range. Compensation depends on the facts and circumstances of each case.

Minimum Experience

2 years

View full job page →

1mo ago

Cybersecurity Analyst, Advanced

Naval Nuclear Laboratory Schenectady, NY

Schenectady, NY

1mo ago Closed

$86k - $135k/yr Full time Adversary Emulation Incident Response Information Security

This position is no longer accepting applications (closed Sep 3, 2026).

Job Description

Naval Nuclear Laboratory (NNL) is seeking a Cybersecurity Analyst, Advanced to advance red team operations and adversary-based security testing across enterprise environments. This onsite role in Schenectady, NY, US supports efforts to strengthen detection and defensive capabilities through penetration testing, adversary emulation, and purple team engagement.

In this position, you will coordinate closely with the SOC, incident response, and engineering teams to execute realistic attack chains and translate findings into actionable remediation guidance for both technical and executive stakeholders.

Core Responsibilities

Lead and participate in red team assessments and penetration tests.
Perform internal and external penetration testing across networks, systems, applications, cloud environments, APIs, and wireless infrastructure.
Conduct advanced red team operations using adversary emulation aligned with MITRE ATT&CK techniques.
Simulate real-world threats, including nation state actors and advanced persistent threat (APT) tradecraft.
Identify gaps in detection, response, and defensive posture using realistic attack chains and multistage operations.
Collaborate with blue teams during purple team exercises to improve detection logic, response capabilities, and overall SOC effectiveness.
Support cybersecurity system maintenance, upgrades, incident response activities, and threat hunting.
Coordinate stakeholders during tabletop incident response exercises and cybersecurity decision-making scenarios.
Produce detailed technical reports and executive level summaries, including clear remediation guidance.
Present results to internal stakeholders and customers in a clear and actionable format.
Serve as a technical lead for zero day vulnerability response, including rapid analysis and development of mitigation strategies.
Assist in developing and refining cybersecurity policies, standards, procedures, and playbooks based on offensive testing outcomes.
Support government-directed cybersecurity data calls to ensure timely and accurate reporting.

Requirements

Bachelor’s degree from an accredited college or university and minimum 4 years of relevant experience; or
Master’s degree from an accredited college or university in a related field and minimum 2 years of relevant experience.

Technologies

MITRE ATT&CK

Preferred Skills

Strong understanding of cybersecurity principles and offensive security methodologies.
Excellent teamwork, communication, and organizational capabilities.
Robust troubleshooting and problem solving skills.
Ability to collaborate across multiple locations.
Penetration testing or red team experience.
Knowledge of networking protocols.
Experience with Active Directory.
Proficiency in Linux and Windows environments.
Scripting experience.
Familiarity with red team tools and frameworks.
Ability to deliver clear presentations and produce well-structured technical documentation.

Compensation

$86,100.00 - $134,600.00 annually.
Salary information is provided as a general guideline; annual salary is based on candidate experience and qualifications, as well as market and business considerations.

Benefits

Health, Dental, Vision & Voluntary Benefits
Disability, Life & Accident Insurance
401(k) Savings program & Capital Accumulation Plan
Personal & Medical Time Off
Paid Parental Leave
Flexible Work Schedules
Tuition Assistance for Eligible Employees
Student Debt Benefit Personal Time Off Sell Program
Employee Assistance Program (EAP)
Wellness Program
Visit us online to view all NNL benefits!

Citizenship and Eligibility / Compliance

All candidates must be U.S. citizens.
Applicants selected will be subject to a Federal background investigation and must meet eligibility requirements for access to classified matter.
FMP is a government contractor and maintains a drug free workplace and workforce.
All candidates must be able to pass a drug test in compliance with FMP company policy and 10 CFR 707.

View full job page →

Adversary Emulation Cybersecurity Jobs

Security Engineer III, Red Team Operator

Security Engineer III, Red Team Operator

Cybersecurity Analyst, Advanced

Get Adversary Emulation Cybersecurity Jobs alerts