Senior Offensive Security Engineer (Red Team)

KeyBank • Brooklyn, OH

1d • $96,000 - $181,000 • Hybrid

About The Position

The Senior Offensive Security Engineer is a key member of KeyBank’s Cyber Adversary and Exposure Management team within Corporate Information Security’s Cyber Defense function. The team aims to deter, detect, deny, and disrupt adversaries through proactive, threat-centric defense. This role simulates advanced persistent threats and emulates real-world adversaries to assess and improve KeyBank’s detection, response, and resilience capabilities. It extends beyond traditional red teaming and penetration testing by using threat intelligence, custom tooling, and stealthy tradecraft to test security controls and incident response processes.

The role calls for extensive experience in adversary simulation, red teaming, and offensive security operations across on-premises, cloud, and physical environments. The engineer is expected to bring advanced technical expertise and creativity, and to communicate complex findings to technical and executive audiences. The position is based at 4910 Tiedeman Road, Brooklyn, Ohio. Key prioritizes in-office presence while offering flexible options when work can be performed effectively in a mobile environment. The role may require travel for on-site assessments.

Requirements

• Master’s degree in computer science, cybersecurity, or a related field, or equivalent experience.
• At least 8 years of experience in Red Team or penetration testing roles.
• Proficiency with Red Team tools and Command & Control (C2) frameworks.
• Strong scripting and programming skills in PowerShell, Python, JavaScript, Bash, Golang, or similar languages.
• Deep understanding of Windows, Linux, Kali Linux, and macOS operating systems.
• Direct experience with one or more of Google Cloud, Microsoft Azure, and AWS platforms.
• Advanced networking knowledge and experience with attack simulation.
• Deep understanding of the MITRE ATT&CK framework and adversary TTPs.
• Deep understanding of one or more penetration testing methodologies, such as PTES, ISECOM, ISSAF, and OSSTMM.
• Strong research and reporting skills.
• Willingness to travel for on-site assessments.

Nice To Haves

• Offensive Security Certified Professional (OSCP).
• Offensive Security Certified Expert (OSCE).
• Offensive Security Experienced Penetration Tester (OSEP).
• Certified Red Team Professional (CRTP).
• GIAC Penetration Tester (GPEN).
• GIAC Web Application Penetration Tester (GWAPT).
• CREST Registered Penetration Tester / CBEST qualifications.

Responsibilities

• Lead and execute intelligence-driven adversary emulation engagements aligned with frameworks such as MITRE ATT&CK.
• Design and conduct full-scope red team operations, including simulated initial access, lateral movement, privilege escalation, and data exfiltration.
• Conduct physical, external and internal, and wireless network assessments, as well as web and mobile application testing.
• Lead security assessments across Google Cloud, Microsoft Azure, AWS, and embedded systems.
• Develop and test threat actor emulation tools, tactics, and procedures for on-demand Red Team assessments of application, system, cloud, and network security controls.
• Use tools and techniques in the KeyBank environment with minimal supervision and mentor team members in their safe and responsible use.
• Partner with Cyber Threat Intelligence to align Red Team capabilities and tactics with the current threat landscape and translate real-world TTPs into emulation plans.
• Lead cross-functional teams during project testing and architectural design reviews to ensure appropriate security controls are in place.
• Coordinate and monitor third-party penetration testing engagements, ensuring alignment with requirements, effective communication, and timely, accurate reporting.
• Create Red Team metrics and reporting to track program effectiveness and provide stakeholder visibility.
• Coordinate with application and technology system owners to track remediation of findings through completion.
• Expand team capabilities by creating custom tools and automation frameworks, researching novel offensive techniques and tradecraft, incorporating threat actor intelligence into scenarios, and delivering internal presentations and knowledge-sharing sessions.
• Evaluate detection and response capabilities across SOC, EDR/XDR, SIEM, and other security layers.
• Prepare detailed post-mortem reports and executive briefings with prioritized recommendations.
• Mentor junior team members and help develop adversarial tradecraft within the team.
• Build relationships with blue teams, conduct purple team exercises, and improve detection engineering.
• Contribute to ongoing improvement of adversarial emulation methodologies, tooling, and documentation.

Benefits

• Eligible for incentive compensation, which may include production, commission, and/or discretionary incentives.
• Eligible for benefits; details are available through the employer’s benefits list.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior