Red Team Lead Engineer

State Street•Quincy, MA

16h

About The Position

As a senior member of State Street’s cybersecurity organization, the Red Team Lead Engineer guides and carries out adversary-emulation activities, threat-informed security testing, and controlled offensive security operations. The role ensures testing complies with organizational standards, authorization requirements, and applicable regulatory expectations, and is conducted safely within approved scopes and environments. The Lead Engineer designs and leads intelligence-driven assessments of enterprise applications, platforms, cloud services, and critical infrastructure. Assessments examine technical security controls and the effectiveness of detection, prevention, and incident-response capabilities. The role works with technical subject-matter experts, security leadership, risk and process stakeholders, cyber threat intelligence analysts, defensive operations teams, and business system owners to develop realistic scenarios aligned with enterprise risks. This senior position contributes to methodology refinement, scenario development, process improvement, documentation standards, and cross-team coordination. It requires broad technical expertise in areas such as identity and access management, data protection, secure software practices, cloud and infrastructure security, endpoint and detection technologies, network security, and vulnerability and threat management. Knowledge of security monitoring, detection engineering, and incident-response workflows supports evaluation of organizational defenses.

Requirements

Advanced proficiency in offensive security techniques and threat-informed testing methodologies.
Strong understanding of adversary behaviors and attack frameworks to guide scenario design.
Broad technical knowledge across networks, operating systems, cloud environments, and core security controls.
Analytical ability to identify core issues, interpret risk, and propose practical, evidence-driven solutions.
Strong organizational, time-management, and prioritization skills in dynamic, high-pressure environments.
Commitment to maintaining awareness of emerging threats, vulnerabilities, and offensive security trends.
Ability to develop or refine tools and automate tasks using common scripting languages.
Demonstrated leadership in analyzing complex issues, shaping direction, and guiding team decision-making.
Excellent communication skills, including the ability to explain complex technical concepts to diverse audiences.
High integrity, professionalism, and sound judgment when handling sensitive information and operating under pressure.
Bachelor’s degree or equivalent advanced security experience.
4–6 years leading and/or conducting penetration testing or red-team activities.
Experience coordinating with defensive teams to evaluate detections.
Exceptional communication and reporting skills for diverse audiences.

Responsibilities

Lead and execute adversary-emulation activities to assess organizational defenses and security control effectiveness.
Oversee and perform targeted security assessments across applications, infrastructure, cloud platforms, and critical enterprise technologies.
Guide team members, assign work, and review testing approaches for quality and safety.
Collaborate with security, technology, and risk stakeholders to design realistic, threat-informed testing scenarios.
Evaluate detection and response capabilities and drive improvements through coordinated purple-team efforts.
Develop and refine testing methodologies, tooling standards, and reporting practices to mature the program.
Deliver audit-ready reports and provide remediation guidance to reduce identified risks.

Benefits

401(k) retirement savings plan with company match.
Insurance coverage including basic life, medical, dental, vision, long-term disability, and optional additional coverages.
Paid time off, including vacation, sick leave, short-term disability, and leave for family care responsibilities.
Access to an Employee Assistance Program.
Eligibility for annual performance-based incentive awards, with stated exclusions for certain sales roles.
Eligibility for certain tax-advantaged savings plans.
Inclusive development opportunities.
Flexible work-life support.
Paid volunteer days.
Employee networks.