• The red-team tradecraft and standards.You set the methods, playbooks, and quality bar the team operates to. These are adversary emulation, C2 tradecraft, initial access, privilege escalation, lateral movement, defense evasion, and assumed-breach methodology — and keep them current as adversaries and defenses evolve.
• The hardest campaigns.You scope, lead, and land the most complex objective-based operations end-to-end, and you're the technical escalation point when an operation hits a wall.
• Rules of engagement and safe conduct.You own the authorization, scoping, deconfliction, and rules-of-engagement governance that keep offensive operations legal, in-scope, and safe.
• AI-augmented red teaming, on two fronts.You drive how the teamoperates and maturesagentic AI offensive tooling to sharpen planning, tradecraft research, evidence synthesis, reporting, and you lead adversarial testing of the enterprise's own production AI systems as targets.
• Defensive impact and functional influence.You turn campaigns into executive-consumable risk narratives, advise leadership on the direction of the red-team function, and partner with detection engineering and the SOC to close the loop on what we found.

• Set and govern the team's adversary-emulation methodology, C2 tradecraft standards, and evidence-quality bar; standardize how objective-based operations are scoped, executed, and reported.
• Lead the most complex red-team campaigns, external/internal network, social engineering, assumed-breach, and full-scope objective operations, with full autonomy, and mentor Senior red teamers on tradecraft without being their manager.
• Own rules of engagement:define authorization, scope, deconfliction, and safe-conduct standards for every operation, in partnership with the Associate Director and stakeholders.
• Operate and mature agentic AI red-team tooling:apply it to improve campaign planning, adversary research, and reporting quality; evaluate AI-assisted output for accuracy and operational fit; and feed practitioner requirements back to the Offensive AI Engineering team who build the platform.
• Test AI systems as targets:lead adversarial assessments of production AI-enabled systems, prompt injection (direct/indirect), agent/tool abuse, RAG/training-data poisoning, sensitive-data exposure, and guardrail/control bypass, including abusing an internal AI agent as a step toward a mission objective within a broader adversary-emulation campaign, mapped to the OWASP Top 10 for LLM Applications, MITRE ATLAS, and the NIST AI Risk Management Framework.
• Run purple-team engagements: measure detection and response (dwell time, alert fidelity, ATT&CK coverage) and drive detection-engineering improvements from what the campaign surfaced.
• Advise leadership on the direction of the red-team function; identify gaps in coverage and defensive controls; propose new adversary-emulation approaches for emerging threats.

• By 90 days:you've learned about our most complex prior campaigns and have had input on the planning/strategy for the next set, mapped the current state of our tradecraft and rules-of-engagement standards, and identified the first standards to raise.
• By 6 months:the team operates to methodology and RoE standards you've set; agentic AI tooling is integrated into at least one core red-team workflow, and you've led at least one adversarial assessment of a production AI system.
• By 12 months:AI-augmented red teaming and AI-system testing are a normal part of how the team works; you're advising leadership on the multi-quarter direction of the red-team function.

You do not need to check every box below.If you're a deep red-team operator and leader who's started testing AI systems and is ready to bring AI fluency to a team, we want to talk.

You'll need:

• 7+ years in red team, adversary emulation, or offensive security operations, with ~2 years leading complex operations or technical workstreams, setting the tradecraft and standards other operators follow.
• Deep adversary-emulation tradecraft. Objective-based operations across the full attack lifecycle (initial access, privilege escalation, lateral movement, defense evasion), hands-on C2 (e.g. Cobalt Strike, Brute Ratel, Nighthawk, and Mythic), and Active Directory / Entra ID attack paths, with a track record leading the most complex campaigns autonomously.
• Rules-of-engagement discipline. You've owned the authorization, scoping, deconfliction, and safe-conduct standards that keep offensive operations legal and in-scope, and you can represent the red team's risk to security leadership.
• You've attacked AI.Hands-on adversarial testing of AI/LLM-powered systems (prompt injection, agent/tool abuse, jailbreaks), demonstrated ability to red-team emerging AI systems, or a strong red-team operator ready to build AI-attack capability and lead the team into it. We care about what you've done, not years on a framework that's only a few years old.
• You operate agentic AI tooling. You've used modern AI-assisted or agentic offensive tooling in real operations and can judge where it helps, or you're a strong operator ready to adopt it and lead a team's move toward it.
• You script. Advanced proficiency in Python, PowerShell, Bash, or Ruby for automation and custom red-team tooling.
• You translate operations into defensive impact. Purple-team debriefs, detection-engineering feedback, and executive-consumable risk narratives that change what the business does next.

Certifications are a plus, not a gate (e.g. OSCP, OSEP, OSED, OSCE3, CRTO, CRTL, or equivalent advanced credentials.)

Strong pluses (any of these will make you stand out):

• Contributing practitioner requirements to, or extending, agentic AI offensive tooling (multi-agent orchestration, MCP servers, LLM-as-judge) built by an AI-engineering team.
• Deeper adversarial ML, model extraction/inversion, membership inference, data/supply-chain poisoning, and hands-on with PyRIT or Garak.
• Malware development, custom tooling/implant development, or novel attack-chain research; published research or conference talks (DEF CON, Black Hat, BSides, x33fcon).
• Threat-intelligence-driven emulation (mapping APT/eCrime TTPs to campaigns) and detection-engineering collaboration.

You'll embed with our offensive service lines and set the rigor the red team operates to. You'll own, with the Associate Director and stakeholders, the authorization and rules of engagement for every operation, and the acceptable use of AI tooling in engagements. You lead the red-team craft; the Associate Director leads the people; the Offensive AI Engineering team builds the platform you help mature.

Scheduled Weekly Hours

Pay Range

Description of Benefits

Application Deadline: 08-09-2026