Red Team Engineer

Acrisure•Atlanta, GA

2d•Onsite

About The Position

Acrisure is seeking a senior offensive security expert to identify, exploit, and demonstrate complex attack paths across applications, cloud environments, AI-enabled technologies, and enterprise infrastructure. The role leads red team engagements, designs offensive testing methodologies, develops custom attack tooling, and advises engineering and security leadership. It emphasizes secure software development and application architecture to uncover vulnerabilities that traditional assessments may miss, demonstrate business impact through complete attack chains, influence secure design decisions, and mature the organization’s offensive security capabilities. The position includes enterprise-scale adversary simulations; source-code and architecture assessments; manual web application and API penetration testing; AI-augmented security testing; AWS and Azure assessments; tooling and automation; reporting and remediation validation; and collaboration with engineering, AppSec, SOC, and Detection Engineering teams. The role also provides technical leadership, mentoring, executive-level risk perspectives, and guidance on enterprise offensive security standards and strategy. Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross-functional partnership.

Requirements

At least 8 years of progressive experience in offensive security, penetration testing, red teaming, application security, or adversary simulation.
Deep expertise identifying and exploiting complex vulnerabilities in web applications, APIs, cloud services, and distributed systems.
Strong software development background and demonstrated proficiency in Python, C#, JavaScript, PowerShell, Go, or similar languages.
Ability to read, analyze, debug, and assess enterprise application source code.
Experience developing custom offensive security tools, exploit frameworks, or vulnerability research projects.
Extensive experience assessing authentication, authorization, identity management, and privilege-escalation risks.
Advanced understanding of application architecture, software development lifecycles, microservices, APIs, and cloud-native technologies.
Demonstrated experience leading penetration tests or red team engagements from planning through executive reporting.
Experience conducting cloud security assessments in AWS and Azure.
Ability to communicate technical findings to engineers, architects, executives, and security leadership.
Comfort with an on-site presence for collaboration, team leadership, and cross-functional partnership.

Responsibilities

Lead enterprise-scale red team operations simulating advanced threat actors, insider threats, and targeted attacks.
Design and execute multistage attack scenarios across applications, cloud infrastructure, identity systems, and AI-enabled platforms.
Develop tactics, techniques, and procedures aligned with emerging adversary behavior and MITRE ATT&CK frameworks.
Identify and demonstrate realistic attack paths that could lead to privilege escalation, data compromise, ransomware deployment, or business disruption.
Conduct stealth testing and detection-validation exercises with SOC and Detection Engineering teams.
Perform advanced source-code reviews and architecture assessments to identify systemic security weaknesses.
Analyze software design patterns, trust boundaries, authorization frameworks, and application workflows for exploitable weaknesses.
Review codebases across .NET, C#, Java, JavaScript, TypeScript, Python, and cloud-native architectures.
Partner with engineering leadership to improve secure-coding standards and application-security maturity.
Conduct manual penetration tests against web applications, REST and GraphQL APIs, and microservices, including testing authentication, authorization, session management, injection, and business logic.
Use source-code-assisted testing to find vulnerabilities that black-box testing may miss.
Test SaaS multi-tenant isolation boundaries and assess authentication and session architectures, including OAuth/OIDC, JWTs, MFA, token lifecycles, and session revocation.
Validate authorization models end-to-end from API gateway to data layer and assess high-risk application changes, features, and integrations.
Use AI tools to accelerate vulnerability discovery, payload generation, reconnaissance, and report writing.
Build and maintain AI-assisted attack workflows, including automated reconnaissance, intelligent fuzzing, pattern-based code review, and exploit-chain analysis.
Assess AI-integrated applications for prompt injection, training-data leakage, model manipulation, excessive agency, and insecure output handling.
Contribute to AI red-team exercises targeting LLM-powered features, chatbots, and agentic systems; translate emerging research into practical testing methods.
Conduct penetration tests against AWS and Azure cloud-hosted applications and services, including serverless functions, container workloads, and managed services.
Assess cloud identity and access configurations, API gateways, WAF effectiveness, and network segmentation; identify paths from application compromise to cloud infrastructure.
Build and maintain custom offensive tools, including scanners, exploit scripts, and validation frameworks.
Develop repeatable automated security validation tests for CI/CD pipelines.
Produce evidence-based penetration-test reports with proof-of-concept exploits, risk ratings, and actionable remediation guidance; track findings and retest fixes.
Contribute to attack playbooks, TTP documentation, and the knowledge base.
Partner with AppSec engineers to translate offensive findings into improvements to defensive tooling, SAST/DAST rules, and ASPM policies.
Work with development teams to explain vulnerabilities, demonstrate impact, and advise on secure design patterns.
Support bug bounty triage and validation, and participate in purple-team exercises with detection engineering and SOC teams.
Serve as a technical leader and subject matter expert for offensive security initiatives; mentor junior red team, penetration testing, and application security personnel.
Provide executive-level risk perspectives and technical recommendations to security leadership.
Influence security strategy and establish offensive security standards, methodologies, and best practices across the enterprise.