Senior AI Red Team Analyst

Thomson Reuters•Eagan, MN

20h•Hybrid

About The Position

Thomson Reuters is seeking a Senior AI Red Team Analyst who supports offensive security operations by simulating realistic adversary behavior in enterprise environments. This role focuses on hands‑on execution of red team activities and close collaboration with detection, response, and threat engineering teams to improve security visibility, detection coverage, and defensive outcomes. This role is intended for practitioners who actively perform offensive security work and want to grow deeper in adversary emulation, purple teaming, and modern enterprise attack scenarios. About the Role As a Senior AI Red Team Analyst, you will: Execute scoped red team and adversary simulation activities Perform offensive testing across: endpoint and identity environment, Active Directory and authentication flows, and Cloud and SaaS platforms (AWS, Azure, GCP, etc.) Use real‑world attacker techniques to validate preventive and detective controls Participate in purple team exercises with Detection Engineering and Blue Team partners Document findings and support post‑engagement reporting Contribute to: Attack playbooks and scenario development, tooling reuse, refinement, and documentation, and repeatable adversary behaviors aligned to MITRE ATT&CK Stay current on emerging attacker techniques, tools, and tradecraft

Requirements

2+ years of experience in Red team/offensive security or Penetration testing
Working knowledge of Windows systems, basic Active Directory concepts, common attacker behaviors (credential access, lateral movement, persistence)
Familiarity with MITRE ATT&CK and common red team or offensive security tooling
Basic scripting or automation skills (Python, PowerShell, or similar)
Ability to collaborate with teammates and clearly communicate technical findings
Practical experience using AI tools (e.g., ChatGPT, Claude) for security‑related tasks, such as: researching attacker techniques or vulnerabilities, assisting with payload generation, scripting, or automation, or drafting or refining detection ideas, attack scenarios, or documentation.

Nice To Haves

Public write‑ups, blog posts, conference talks, or other authored security content (research, walkthroughs, lessons learned, tooling notes, etc.)
Experience with purple team exercises or detection validation
Exposure to: cloud security or identity‑focused attacks or endpoint Detection & Response (EDR) platforms
Deeper experimentation with AI‑assisted workflows

Responsibilities

Execute scoped red team and adversary simulation activities
Perform offensive testing across: endpoint and identity environment, Active Directory and authentication flows, and Cloud and SaaS platforms (AWS, Azure, GCP, etc.)
Use real‑world attacker techniques to validate preventive and detective controls
Participate in purple team exercises with Detection Engineering and Blue Team partners
Document findings and support post‑engagement reporting
Contribute to: Attack playbooks and scenario development, tooling reuse, refinement, and documentation, and repeatable adversary behaviors aligned to MITRE ATT&CK
Stay current on emerging attacker techniques, tools, and tradecraft

Benefits

Hybrid Work Model
Flexibility & Work-Life Balance
Work from anywhere for up to 8 weeks per year
Career Development and Growth
Continuous learning and skill development
Grow My Way programming
Industry Competitive Benefits
Flexible vacation
Two company-wide Mental Health Days off
Access to the Headspace app
Retirement savings
Tuition reimbursement
Employee incentive programs
Resources for mental, physical, and financial wellbeing
Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more.
Two paid volunteer days off annually
Opportunities to get involved with pro-bono consulting projects and Environmental, Social, and Governance (ESG) initiatives.
Market competitive health, dental, vision, disability, and life insurance programs
Competitive 401k plan with company match
Competitive vacation, sick and safe paid time off
Paid holidays (including two company mental health days off)
Parental leave
Sabbatical leave
Optional hospital, accident and sickness insurance paid 100% by the employee
Optional life and AD&D insurance paid 100% by the employee
Flexible Spending and Health Savings Accounts
Fitness reimbursement
Access to Employee Assistance Program
Group Legal Identity Theft Protection benefit paid 100% by employee
Access to 529 Plan
Commuter benefits
Adoption & Surrogacy Assistance
Access to Employee Stock Purchase Plan.