Senior Engineer, Cyber Security Counter Threat Management

Royal Caribbean Cruises Ltd•Miami, FL

9d•Onsite

About The Position

The Royal Caribbean Group’s Global Information Security Team has an exciting career opportunity for a full time Senior Engineer, Cyber Security Threat Management reporting to the Senior Director, Cybersecurity Business Enablement Engineering. The position is onsite and based in Miramar, Florida. The position is also not eligible for work authorization sponsorship. The Senior Engineer, Cyber Security Counter Threat Management will serve as a technical authority in red teaming and adversary emulation, leading engagements that stress-test our defenses against sophisticated attack scenarios. This role requires deep offensive security expertise across cloud, identity, network, and endpoint layers, using advanced tradecraft to uncover gaps and convert findings into actionable risk reduction. Acting as the subject matter expert, this individual will mentor team members, shape detection engineering, and influence enterprise defense strategy through hands-on execution and strategic guidance.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, or a related field; equivalent experience considered.
7+ years in offensive security, focusing extensively on red teaming and operating within well-defended, enterprise-scale environments.
Proven ability to lead red team engagements independently and communicate findings effectively to technical and executive audiences.
Expertise in adversary tradecraft across the full kill chain, with operational fluency in MITRE ATT&CK.
Skilled in developing custom offensive tools, payloads, and obfuscation techniques for defeating EDR/XDR.
Proficiency with C2 frameworks (Cobalt Strike, Mythic, Sliver) and offensive toolsets (BloodHound, Impacket).
Strong scripting/programming skills (Python, PowerShell, C#, or Go).
Deep command of cloud and identity attack techniques (Azure, Entra ID, AWS) and operating system internals.
Strong understanding of phishing and social engineering vectors, as well as network exploitation techniques.
Strategic thinking combined with technical precision.
Ability to mentor team members and foster a culture of excellence and integrity.
Strong communication and executive reporting skills.

Nice To Haves

Advanced offensive certifications such as OSEP, OSCE3, CRTO, CRTL, or GXPN (OSCP or equivalent baseline expected).

Responsibilities

Lead end-to-end red team and adversary emulation campaigns — including scoping, objective definition, execution, and reporting — aligned with threat intelligence and MITRE ATT&CK.
Design and deliver advanced attack paths targeting Azure, AWS, Active Directory, endpoints, and networks, chaining techniques to achieve defined objectives under stealth conditions.
Develop custom offensive tooling, payloads, and C2 infrastructure; innovate techniques to evade mature detection and response controls.
Execute phishing, social engineering, and initial-access methodologies against hardened environments.
Act as the offensive-security subject matter expert for leadership, detection, and engineering teams; advise on realistic attacker behaviors and defensive priorities.
Conduct purple team exercises to enhance detection coverage while strengthening incident detection and response processes.
Produce high-impact reports and executive briefings translating findings into clear technical actions and strategic risk insights.
Mentor junior operators, provide technical reviews, and codify operational methodologies and tooling standards.
Research emerging threats, develop new techniques, and ensure the team remains ahead of evolving adversaries.
Promote ethical judgment, operational security discipline, and compliance within engagement rules.