Red Team Security Engineer

About the role

At Outsourcing Services International | OSI, the Red Team Security Engineer conducts authorized adversary simulations and builds and maintains automation across SIEM, SOAR, security tooling, APIs, and analyst workflows. The role also includes security analyst activities as operational needs require.

Responsibilities

• Plan and execute authorized Red Team engagements that simulate realistic threat actors and attack paths.
• Conduct reconnaissance, exploitation, privilege escalation, lateral movement, persistence, and other adversary techniques within approved rules of engagement.
• Assess security controls across endpoints, identity platforms, networks, applications, cloud environments, and security infrastructure.
• Perform attack-path analysis and identify opportunities to combine weaknesses into material business risk.
• Develop and maintain offensive security tools, scripts, payloads, and testing infrastructure.
• Apply the MITRE ATT&CK framework to Red Team planning, execution, reporting, and detection validation.
• Test the organization’s ability to prevent, detect, investigate, and respond to adversary activity.
• Partner with Blue Team/Security Operations personnel on purple-team exercises and defensive improvements.
• Document attack paths, evidence, business impact, control gaps, and recommended remediation; validate remediation through follow-up testing.
• Build and maintain automation across SIEM, SOAR, security tooling, APIs, and analyst workflows.
• As operational needs require, participate in alert investigation, incident response, threat hunting, detection engineering, and security platform support.

Datos clave

• Plans and executes authorized Red Team engagements.
• Builds and maintains automation across SIEM, SOAR, security tooling, APIs, and analyst workflows.
• May support alert investigation, incident response, threat hunting, detection engineering, and security platform support.