Red Team Engineer

About the role

The Red Team Engineer joins State Street’s Global Cyber Security group to lead adversary‑emulation and threat‑informed security testing. The role focuses on realistic offensive operations that evaluate the effectiveness of detection, prevention, response, and governance across enterprise systems.

Key responsibilities

• Execute authorized adversary‑emulation activities to assess defenses and organizational resilience.
• Perform targeted security assessments of applications, infrastructure, cloud platforms, and enterprise technologies.
• Collaborate with cybersecurity, technology, and risk stakeholders to design realistic, threat‑informed testing scenarios.
• Evaluate detection and response capabilities and support improvement through coordinated purple‑team activities.
• Operate within defined approval processes, scopes, and safe‑testing protocols.
• Develop or adapt tools and scripts to support realistic testing while ensuring security and compliance.
• Produce clear, audit‑ready reports and assist remediation efforts.

Required profile

• Strong technical expertise in offensive security, including infrastructure, application, and cloud‑focused penetration testing.
• Deep understanding of adversary behaviors and attack frameworks such as MITRE ATT&CK.
• Broad knowledge of security control domains: identity & access management, data protection, secure software development, cloud and infrastructure security, endpoint detection, network security, and vulnerability management.
• Familiarity with security monitoring, detection engineering, and incident response processes.
• Ability to develop or adapt scripts using common scripting languages.

Required skills

• MITRE ATT&CK framework
• Python scripting
• PowerShell scripting
• Bash scripting
• Penetration testing tools and methodologies
• Cloud security concepts

What we offer

• Opportunity to work on high‑impact offensive security projects within a leading financial services firm.
• Collaboration with cross‑functional security and technology teams.
• Access to advanced tools and resources for red‑team operations.