Engineer III - Red Team

Cencora•Philadelphia, TX

About The Position

The Engineer III, Red Team, will serve as a senior red team operator within the global Cyber Defense organization. This role is responsible for planning, executing, and reporting realistic cyber attack simulations against the organization’s critical assets and security controls. The Engineer III will emulate the tactics, techniques, and procedures of advanced threat actors to rigorously test the effectiveness of detection, prevention, and response capabilities. This position requires deep, hands-on expertise in offensive security, covert operations, and the ability to translate technical findings into actionable defensive improvements.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent work experience
6+ years of progressive experience in cybersecurity, with at least 4 years dedicated to Red Team operations, advanced penetration testing, or offensive security research.
Advanced knowledge and hands-on experience in full lifecycle of Red Team engagement and advanced penetration testing methodologies.
Expertise with common red team toolsets (e.g., Cobalt Strike, Nighthawk C2, Metasploit, Evilginx) and custom implant scripting and development.
Strong understanding of network protocols, operating system internals (Windows, Linux, MacOS), cloud security, and defensive security technologies.
Familiarity with intelligence frameworks such as MITRE ATT&CK for mapping and emulating adversary behavior.
Proven ability to bypass advanced security defenses and demonstrate impact on critical business assets.
Hands-on experience with at least one scripting or programming language for tooling and automation (e.g., Python, Go, Powershell).
Demonstrated success in executing large-scale, enterprise-level Red Team simulations.
Strong written and verbal communication skills, with the ability to articulate complex technical vulnerabilities and operational findings to a non-technical audience.

Nice To Haves

Offensive Security Certified Professional (OSCP) or Offensive Security Wireless Professional (OSWP)
GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), or GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)

Responsibilities

Plan and execute complex covert Red Team operations from initial compromise to achieving defined high-value objectives, maintaining operational security throughout.
Develop, customize, and deploy advanced offensive tooling, exploits, and implants to bypass security controls and maintain persistence within target environments.
Conduct vulnerability research, cyber security assessments, and social engineering campaigns as part of Red Team engagement.
Collaborate closely with Cyber Threat Intelligence to incorporate real-world adversary TTPs and create intelligence-driven attack scenarios.
Produce high-quality, executive-level reports detailing simulation findings, observed defensive gaps, and prioritized, actionable remediation recommendations.
Facilitate detailed Purple Team exercises by working directly with Incident Response analysts to share offensive techniques and validate detection and response capabilities in real-time.
Present findings and strategic recommendations to technical and executive stakeholders.
Stay current with emerging offensive technologies, adversary TTPs, and defensive countermeasures.

Benefits

compensation
benefits
resources that enable a highly inclusive culture
support our team members’ ability to live with purpose every day
medical care
dental care
vision care
comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness
support for working families, which may include backup dependent care
adoption assistance
infertility coverage
family building support
behavioral health solutions
paid parental leave
paid caregiver leave
variety of training programs
professional development resources
opportunities to participate in mentorship programs
employee resource groups
volunteer activities