red team engineer

Octdaily

<div>
 
 Role Overview
 
 
 We are seeking a Mid&ndash;Senior Offensive Security Engineer with hands-on expertise in vulnerability assessment, penetration testing, red teaming, and Azure environment security assessments. The candidate should possess strong technical experience in web, API, and mobile application security, and be able to assess configurations based on CIS controls, NIST, and other industry standards.
 
 
 
 
 
 Key Responsibilities
 
 
 &bull; Perform comprehensive VAPT across web, API, and mobile applications.
 
 
 &bull; Conduct red team operations and adversarial simulations to assess defense posture.
 
 
 &bull; Perform Azure WAF and cloud environment configuration reviews and recommend hardening measures.
 
 
 &bull; Evaluate environments against CIS Controls, NIST, and internal baselines.
 
 
 &bull; Collaborate with DevSecOps and cloud engineering teams to support secure design and remediation.
 
 
 &bull; Assist with automation of security testing and vulnerability management workflows.
 
 
 
 
 
 Required Experience &amp; Skills
 
 
 &bull; 5&ndash;8 years of hands-on experience in offensive security or penetration testing roles.
 
 
 &bull; Expertise in web, API, and mobile application testing (Burp Suite, OWASP ZAP, Postman, MobSF, Frida).
 
 
 &bull; Strong understanding of OWASP Top 10, CWE, MITRE ATT&amp;CK, and exploitation methodologies.
 
 
 &bull; Experience in Azure security (WAF, Key Vault, App Services, Azure AD).
 
 
 &bull; Proficiency in scripting languages such as Python, PowerShell, or Bash.
 
 
 &bull; Knowledge of CIS Benchmarks and common cloud misconfigurations.
 
 
 
 
 
 Preferred Skills / Certifications
 
 
 &bull; Certifications: OSCP, OSWE, CRTP, OSEP, AZ-500, or CREST CRT.
 
 
 &bull; Familiarity with SIEM/EDR evasion and threat simulation techniques.
 
</div>

Offensive Security Engineer

Central Hudson

<div><div>Benefits:</div><div><ul><li>
Competitive compensation</li><li>
Medical, dental, and vision insurance</li><li>
401(k) retirement savings plan with substantial company match</li><li>
Life and travel insurance</li><li>
Tuition assistance</li><li>
Wellness reimbursement program</li><li>
Paid holidays and vacation</li></ul></div>
What is an Information Security Engineer - Offensive Security?
We are seeking a diligent and experienced Offensive Security Engineer to join our team. In this role, you will be working within a group of highly motivated Information Technology and Cybersecurity professionals committed to keeping Central Hudson safe. The Offensive Security Engineer is responsible for conducting intelligence‑led threat emulation and purple team exercises to simulate real‑world adversaries, validate detection and response capabilities, and identify security control gaps. This role partners closely with the SOC, threat intelligence, detection engineering, and infrastructure teams to continuously validate detections, assess control effectiveness, and drive measurable improvements across the detection‑to‑remediation lifecycle. The ideal candidate has a strong understanding of modern security principles, offensive security techniques, and attacker methodologies, along with excellent analytical skills and the ability to clearly communicate technical findings and risk to both technical and non‑technical stakeholders.
What does an Information Security Engineer - Offensive Security?
<ul><li>Conducts targeted offensive testing activities in support of threat emulation and detection validation across networks, applications, cloud environments, and endpoints</li><li>
Executes intelligence‑driven threat emulation exercises that replicate real‑world adversaries, campaigns, and tactics, techniques, and procedures (TTPs)</li><li>
Performs vulnerability remediation testing to validate the effectiveness of fixes and compensating controls</li><li>
Maps emulated activity to MITRE ATT&amp;CK techniques and track detection coverage and gaps</li><li>
Develops and maintains custom tools, scripts, and payloads to support testing activities</li><li>
Safely exercises adversary techniques to evaluate the effectiveness of security controls and detections</li><li>
Partners with blue team, SOC, and engineering teams to test detection and response capabilities</li><li>
Implements, maintains, and enhances red team tooling and infrastructure to support penetration testing, adversary emulation, and purple team exercises</li><li>
Leads and executes purple team exercises in close coordination with the SOC and Blue Team, sharing findings, techniques, and actionable recommendations to strengthen detection, response, and recovery capabilities</li><li>
Assists in tuning and validating security controls, alerts, analytics, and incident response playbooks based on threat emulation outcomes</li><li>
Validates security detections across SIEM, EDR, identity, and cloud platforms using repeatable and measurable testing scenarios</li><li>
Produces clear, actionable reports detailing emulated adversary behavior, detection gaps, response gaps, and prioritized remediation guidance</li><li>
Presents results to technical teams and leadership, translating technical risk into business terms</li><li>
Tracks remediation progress and re-test identified issues</li><li>
Stays current on emerging threats, adversary techniques, and offensive security tooling</li><li>
Contributes to the development of red team methodologies, frameworks, and documentation</li><li>
Supports threat intelligence&ndash;driven testing aligned with real-world attack trends</li><li>
Consumes and operationalizes threat intelligence to inform adversary selection, scenario design, and testing priorities</li><li>
Promotes and raises awareness by educating others about the importance of cybersecurity</li><li>
Builds relationships with government and local agencies to promote collaborative information sharing</li><li>
Stays updated with the latest cybersecurity trends, threats, and technologies</li><li>
Participates in on-call as needed to respond to security incidents outside of regular working hours</li><li>
Provides support for storm restoration efforts</li></ul>
What does it take to be an Information Security Engineer - Offensive Security?
Required:<ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science or related field of study. In lieu of a bachelor&rsquo;s degree, an associate degree in the aforementioned fields and 3 years of information security engineering or related experience or a high school diploma or equivalency degree and 5 years of information security engineering or related experience will be considered</li><li>
Strong knowledge of network, application, and cloud security, including operating systems (Windows and Linux)</li><li>
Working knowledge of common offensive security tools, including but not limited to:<ul><li>
Metasploit, Cobalt Strike (or equivalents), Burp Suite, Nmap, BloodHound, and CrackMapExec</li></ul></li><li>
Knowledge of vulnerability remediation testing and validating the effectiveness of security controls</li><li>
Demonstrated experience collaborating closely with SOC or Blue Team functions to improve detection and incident response maturity</li><li>
Ability to develop scripts or tools using Python, PowerShell, Bash, or C#</li><li>
Solid understanding of security operations and detection technologies, including SIEM, EDR, IDS/IPS, and endpoint protection, to support adversary‑emulation and purple‑team activities</li><li>
Familiarity with industry security frameworks and methodologies, such as:<ul><li>
MITRE ATT&amp;CK</li><li>
NIST 800‑61 (Incident Response)</li><li>
SANS / CIS Critical Security Controls</li></ul></li><li>
Strong analytical and problem‑solving skills with the ability to assess complex security issues</li><li>
Excellent written and verbal communication skills, including the ability to clearly document findings and communicate risk to both technical and non‑technical audiences</li><li>
Ability to work independently with minimal supervision and respond professionally to constructive feedback</li><li>
Ability to work nights, weekends, holidays during a critical cyber incident or event</li><li>
Valid driver&rsquo;s license</li></ul>
Preferred:
<ul><li>3+ years of hands-on experience performing offensive security activities such as penetration testing, detection validation, adversary emulation, red teaming, or exploitation of applications, networks, and cloud environments</li><li>
Familiarity with evaluating security controls and risk exposure through an attacker&rsquo;s lens, including validation of compensating controls and secure design assumptions</li><li>
Experience identifying security weaknesses through threat modeling, attack simulations, and exploitation, with the ability to translate findings into actionable remediation guidance</li><li>
Experience in Energy &amp; Utilities or services industry</li><li>
Relevant certifications such CISSP, CEH, GPEN, GCIH, OSCP, OSWE, or similar offensive security focused credentials</li></ul>
Applications will be accepted until May 7, 2026.
This position has a career path which allows for advancement opportunities within the Information Security Analyst job series. The title and level are commensurate with experience. Pay range: $73,000 - $171,300
 Follow the directions to submit an application and upload your resume for the desired position.
Applications sent via e-mail and US Mail will not be accepted. No phone calls or agencies, please. All replies will be held in strict confidence.
All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, creed, color, ethnicity, arrest or conviction record, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, citizenship, genetic information, familial status, marital status, pregnancy-related condition, domestic violence victim status, veteran or military status, or any other characteristic protected by federal, state or local laws. Central Hudson Gas &amp; Electric Corporation takes affirmative action in support of its policy to employ and advance employment in individuals who are protected veterans and individuals with disabilities.
VEVRAA FEDERAL CONTRACTOR</div>

Information Security Engineer - Offensive Security

GEICO

<div>At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities.
Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive through relentless innovation to exceed our customers&rsquo; expectations while making a real impact for our company through our shared purpose.
When you join our company, we want you to feel valued, supported and proud to work here. That&rsquo;s why we offer The GEICO Pledge: Great Company, Great Culture, Great Rewards and Great Careers.<div><div>
We are seeking a hands-on Staff Security Engineer for our Red Team with deep technical expertise in running AI-driven adversary operations that measurably improve detection and response processes. You&rsquo;ll execute at the intersection of offensive security and AI, developing novel Red Team capabilities and running operations against AI-powered systems.</div><div> 
This role is responsible for working with other stakeholders in planning, executing, and delivering Red Team, Purple Team, and other Adversary Emulation operations. Outcomes will directly inform detection engineering, incident response readiness, and control validation. You will be responsible for the testing/evaluation of AI applications and agents as well as the leveraging of agentic AI to gain efficiencies for Red Team and penetration testing efforts.</div><div> 
Success in this role means you can champion operations end-to-end: shape the scope and objectives, define safety controls and deconfliction, build or tailor emulation plans, execute advanced operator tradecraft in authorized environments, and deliver clear findings mapped to TTPs, telemetry gaps, and detection opportunities. You are someone with progressive experience on Offensive Security operations who can consistently translate realistic adversary behavior into practical defensive improvements and repeatable emulation capability.</div><div> 
This role offers a unique opportunity to expand your influence, forge critical alliances, and lead the evolution of Adversary Emulation programs in a fast-paced environment. Your impact will be felt across the organization as we strengthen our defenses against ever-evolving cyber threats through simulation of real-world cyberattacks and attempts to breach the organization's defenses.</div><div> 
Responsibilities:</div><div><ul><li>
Participate in AI-focused adversary operations: plan, execute and deliver Red Team, Purple Team and other Adversary Emulation operations.</li></ul></div><div><ul><li>
Scope and design operations: define objectives, target scope, success criteria, safety controls.</li></ul></div><div><ul><li>
Develop and run emulations: build, customize, and execute emulation plans using platforms such as MITRE Caldera, or similar products.</li></ul></div><div><ul><li>
Execute advanced AI-leveraged tradecraft across enterprise environments (identity, endpoints, networks, cloud, SaaS) in a controlled, measurable way.</li></ul></div><div><ul><li>
Partner with defenders: work directly with Detection Engineering, Threat Intelligence, and Risk Management to validate telemetry coverage, tune detections, improve response playbooks, and close visibility gaps.</li></ul></div><div><ul><li>
Champion continuous improvement and innovation in adversary operations techniques, tools, and methodologies.</li></ul></div><div>
Required Qualifications:</div><div><ul><li>
8+ years of experience in Offensive Security operations.</li></ul></div><div><ul><li>
5+ years of hands-on experience running Red Team, Purple Team, and other Adversary operations in enterprise environments.</li></ul></div></div><div><div><ul><li>
Deep understanding of LLM architecture and familiarity with how models process input, manage context, and generate output.</li></ul></div><div><ul><li>
Experience with AI frameworks and tools such as PyTorch, TensorFlow, Hugging Face, and LangChain.</li></ul></div><div><ul><li>
Experience with Azure, AWS, GCP or other cloud providers.</li></ul></div><div><ul><li>
Strong working knowledge of MITRE ATLAS and ATT&amp;CK, and the ability to translate TTPs into repeatable emulations and measurable detection outcomes.</li></ul></div><div><ul><li>
Hands-on experience with adversary emulation platforms, including building/maintaining emulations and running operations.</li></ul></div><div><ul><li>
Demonstrated capability with core operator tradecraft (C2, payload delivery, privilege escalation, lateral movement, persistence, and operational security) appropriate to authorized testing.</li></ul></div><div><ul><li>
Extensive use of red team frameworks: Cobalt Strike, Sliver, Metasploit, Empire, BloodHound.</li></ul></div><div>
Preferred Qualifications:</div><div><ul><li>
OSCP, OSCE, CRTO, CISSP, or relevant Red Team/offensive security certs.</li></ul></div><div><ul><li>
GIAC Penetration Testing, Red Team certifications (GCTI, GPEN, GXPN) a plus.</li></ul></div><div><ul><li>
Breadth and depth of knowledge in security of operating systems, networking and protocols, firewalls, databases and middleware applications, forensics, scripting and programing.</li></ul></div><div><ul><li>
Advanced level knowledge of Linux/Mac/Windows operating systems, AWS/Azure cloud environments and cloud-native resources (ex. Containers, Kubernetes, microservices, serverless functions).</li></ul></div><div><ul><li>
Experience with conducting reverse engineering on mobile applications, including applications with anti-emulator and obfuscation protections.</li></ul></div><div>
Education:</div><div><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science or a related field.</li></ul></div></div> 
Annual Salary
$110,000.00 - $260,000.00
The above annual salary range is a general guideline. Multiple factors are taken into consideration to arrive at the final hourly rate/ annual salary to be offered to the selected candidate. Factors include, but are not limited to, the scope and responsibilities of the role, the selected candidate&rsquo;s work experience, education and training, the work location as well as market and business considerations. 

GEICO will consider sponsoring a new qualified applicant for employment authorization for this position. 
The GEICO Pledge:
Great Company: At GEICO, we help our customers through life&rsquo;s twists and turns. Our mission is to protect people when they need it most and we&rsquo;re constantly evolving to stay ahead of their needs.
We&rsquo;re an iconic brand that thrives on innovation, exceeding our customers&rsquo; expectations and enabling our collective success. From day one, you&rsquo;ll take on exciting challenges that help you grow and collaborate with dynamic teams who want to make a positive impact on people&rsquo;s lives.
Great Careers: We offer a career where you can learn, grow, and thrive through personalized development programs, created with your career &ndash; and your potential &ndash; in mind. You&rsquo;ll have access to industry leading training, certification assistance, career mentorship and coaching with supportive leaders at all levels.
Great Culture: We foster an inclusive culture of shared success, rooted in integrity, a bias for action and a winning mindset. Grounded by our core values, we have an an established culture of caring, inclusion, and belonging, that values different perspectives. Our teams are led by dynamic, multi-faceted teams led by supportive leaders, driven by performance excellence and unified under a shared purpose.
As part of our culture, we also offer employee engagement and recognition programs that reward the positive impact our work makes on the lives of our customers.
Great Rewards: We offer compensation and benefits built to enhance your physical well-being, mental and emotional health and financial future.<ul><li>
Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family&rsquo;s overall well-being.</li><li>
Financial benefits including market-competitive compensation; a 401K savings plan vested from day one that offers a 6% match; performance and recognition-based incentives; and tuition assistance.</li><li>
Access to additional benefits like mental healthcare as well as fertility and adoption assistance.</li><li>
Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year.</li></ul>
The equal employment opportunity policy of the GEICO Companies provides for a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religious creed, national origin, ancestry, age, gender, pregnancy, sexual orientation, gender identity, marital status, familial status, disability or genetic information, in compliance with applicable federal, state and local law. GEICO hires and promotes individuals solely on the basis of their qualifications for the job to be filled.
GEICO reasonably accommodates qualified individuals with disabilities to enable them to receive equal employment opportunity and/or perform the essential functions of the job, unless the accommodation would impose an undue hardship to the Company. This applies to all applicants and associates. GEICO also provides a work environment in which each associate is able to be productive and work to the best of their ability. We do not condone or tolerate an atmosphere of intimidation or harassment. We expect and require the cooperation of all associates in maintaining an atmosphere free from discrimination and harassment with mutual respect by and for all associates and applicants.</div>

Staff Security Engineer – Red Team (AI)

Deloitte

<div>
 
 Connect to your career at Deloitte
 
 
 
 
 Deloitte
 
 , established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity.
 
 
 
 At Deloitte, you will make a real impact by working on diverse projects and collaborating with experts to deliver innovative solutions. As an
 
 Offensive Security Senior Engineer
 
 , you will focus on adversary emulation and red teaming to simulate advanced persistent threats (APTs) and cyberattacks. Using frameworks like MITRE ATT&amp;CK, you will test the resilience of our security controls and incident response capabilities. Additionally, you will conduct penetration testing on web applications, mobile apps, APIs, and networks, using scripting, defense evasion techniques, and code review to identify and exploit vulnerabilities.
 
 
 
 Your Role Might Include All The Following
 
 
 
 
 Red Teaming and Penetration Testing
 
 
 
 <ul>
 <li>
 Lead red team engagements to emulate the TTPs of advanced adversaries, using frameworks like MITRE ATT&amp;CK and Caldera to simulate real-world attack scenarios.
 </li>
 <li>
 Design and execute complex attack chains, including initial access, privilege escalation, lateral movement, data exfiltration, and persistence, to test the effectiveness of security controls.
 </li>
 <li>
 Simulate sophisticated threats such as nation-state actors, ransomware groups, and insider threats to identify gaps in detection and response processes.
 </li>
 <li>
 Conduct penetration testing across web applications, networks, cloud environments, and internal systems to identify vulnerabilities and validate red team findings.
 </li>
 <li>
 Test for vulnerabilities in web applications (e.g., SQL injection, XSS, CSRF, IDOR, OWASP Top 10), mobile apps (iOS and Android), and APIs (REST, GraphQL, SOAP).
 </li>
 <li>
 Use tools like Burp Suite, OWASP ZAP, Frida, and MobSF to identify and exploit vulnerabilities in diverse attack surfaces.
 
 
 </li>
 </ul>
 
 Web Application Security
 
 
 
 <ul>
 <li>
 Conduct in-depth penetration testing of web applications to identify vulnerabilities such as SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), insecure direct object references (IDOR), and other OWASP Top 10 issues.
 </li>
 <li>
 Test for business logic flaws, session management issues, and authentication/authorization vulnerabilities in web applications.
 </li>
 <li>
 Use tools like Burp Suite, OWASP ZAP, and manual techniques to identify and exploit web application vulnerabilities.
 
 
 </li>
 </ul>
 
 Scripting and Automation
 
 
 
 <ul>
 <li>
 Write and maintain custom scripts (e.g., in Python, PowerShell, Bash, or JavaScript) to automate attack techniques, payloads, and reconnaissance processes for web, mobile, and API testing.
 </li>
 <li>
 Build tools to streamline pentesting workflows, such as automated vulnerability scanning, exploitation, and post-exploitation activities.
 </li>
 <li>
 Create scripts to bypass web application firewalls (WAFs), evade detection, and test the resilience of blue team defenses.
 
 
 </li>
 </ul>
 
 Defense Evasion Techniques
 
 
 
 <ul>
 <li>
 Research and implement advanced defense evasion techniques to bypass endpoint detection and response (EDR), antivirus, WAFs, and other security solutions.
 </li>
 <li>
 Develop obfuscation methods for payloads and exploits to avoid detection by SIEM, IDS/IPS, and other monitoring tools.
 </li>
 <li>
 Stay updated on the latest evasion techniques and adapt strategies to simulate sophisticated adversaries targeting web applications and other systems.
 
 
 </li>
 </ul>
 
 Code Review &amp; Secure Development
 
 
 
 <ul>
 <li>
 Perform thorough code reviews to identify vulnerabilities in web applications, APIs, and mobile apps, focusing on languages such as Java, JavaScript, Python, PHP, or C#.
 </li>
 <li>
 Identify insecure coding practices, such as improper input validation, lack of output encoding, and insecure API integrations.
 </li>
 <li>
 Collaborate with development teams to provide actionable recommendations for secure coding practices and remediation of identified vulnerabilities.
 
 
 </li>
 </ul>
 
 Mobile and API Security
 
 
 
 <ul>
 <li>
 Perform penetration testing on mobile applications (iOS and Android) to identify vulnerabilities such as insecure storage, improper session handling, and weak authentication mechanisms.
 </li>
 <li>
 Assess API security (REST, GraphQL, SOAP) for issues like broken authentication, excessive data exposure, and lack of rate limiting.
 </li>
 <li>
 Use tools like Burp Suite, Frida, and MobSF to analyze mobile and API attack surfaces and develop exploits for identified vulnerabilities.
 
 
 </li>
 </ul>
 
 Connect To Your Skills And Professional Experience
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, information technology, computer science, or a relevant degree.
 </li>
 <li>
 Minimum 3 to 7 years of hands-on experience in penetration testing, red teaming, or related offensive security roles.
 </li>
 <li>
 Analytical capabilities, critical thinking, and problem-solving mindset (ability to analyze complex data and information to identify key insights and trends).
 </li>
 <li>
 Proficient in English speaking and writing.
 </li>
 <li>
 Flexibility for travel and working hours.
 </li>
 <li>
 strong proficiency in web application pentesting tools such as Burp Suite, OWASP ZAP, and manual testing techniques.
 </li>
 <li>
 Proficiency in scripting languages such as Python, PowerShell, Bash, or JavaScript for automation and tool development.
 </li>
 <li>
 Deep understanding of defense evasion techniques, including bypassing WAFs, EDR, and AV solutions.
 </li>
 <li>
 Expertise in code review for identifying vulnerabilities in web applications, APIs, and mobile apps.
 </li>
 <li>
 Strong knowledge of mobile security testing tools (e.g., Frida, MobSF, Drozer) and API testing tools (e.g., Postman, Burp Suite).
 </li>
 <li>
 Familiarity with common pentesting tools like Metasploit, Nmap, Cobalt Strike, BloodHound, and Kali Linux.
 </li>
 <li>
 Understanding of cloud environments (AWS, Azure, GCP) and their associated attack vectors.
 
 
 </li>
 </ul>
 
 The Following Attributes Are Also Preferable
 
 
 
 <ul>
 <li>
 Relevant certifications such as OSCP, OSWE, OSEP, CRTO, CRTP, GWAPT, GXPN, or equivalent are a plus.
 </li>
 <li>
 Active participation in CTF competitions with demonstrated achievements.
 </li>
 <li>
 Experience with penetration testing of AI systems and Large Language Models (LLMs), including testing for vulnerabilities like prompt injection, data poisoning, model inversion, or adversarial attacks.
 </li>
 <li>
 Experience with adversary emulation frameworks like MITRE ATT&amp;CK or Caldera.
 </li>
 <li>
 Knowledge of secure software development lifecycle (SDLC) and DevSecOps practices.
 </li>
 <li>
 Contributions to the security community through blogs, tools, or conference talks.
 </li>
 <li>
 Familiarity with container security (Docker, Kubernetes) and serverless architectures.
 
 
 </li>
 </ul>
 
 Personal Independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect with your colleagues
 
 
 
 Location: Cairo, Egypt
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; -Dan, Technology &amp; Transformation
 
 
 &ldquo;Everyone always says, &ldquo;it&rsquo;s the people,&rdquo; and that&rsquo;s true. Working for a brand you feel proud of feels pretty good too. And you don&rsquo;t have any stress about fitting into a particular stereotype, because there are so many different types of people in Deloitte Digital.&rdquo; &ndash; Gillian, Technology &amp; Transformation
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So, we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
 
 
</div>

Deloitte Innovation Hub | Cyber Security | Offensive Security Senior Engineer, Cairo, Egypt.

Apple

We are the Apple Services Engineering (ASE) Security Red Team. We focus on deep technical security review work of critical ASE services and infrastructure. These security reviews will be scoped and focused on review depth and quality. We are growing our team and looking an Security Engineer to lead deep reviews that identify meaningful security improvement opportunities. In this role, you will work closely with the security engineering, InfoSec, privacy, SRE, detection, and design review teams to keep Apple's services secure for our users. You will identify security weaknesses, validate and design detection mechanisms, and provide actionable recommendations to enhance our security posture. You will go beyond simple to find risks and identify obscure and complex risks within complex services. You will collaborate with various architecture and engineering teams to continuously validate and improve our security controls and detection capabilities, with a strong focus on developing repeatable testing frameworks and metrics-driven security improvements. If you love diving into complex and important systems, and driving the security of that system over time, we want to talk to you! 
 
Description 
 
In this role, you will scope and lead focused security reviews on critical internet scale applications and supporting infrastructure. You will learn the services architecture and risk profile to build a scope that enables a meaningful security review. 
 
&quot;,&quot;responsibilities&quot;:&quot;Responsible for the enumerating risks, planning reviews, and executing those reviews to identify vulnerabilities and improvement opportunities 
 
A technical expert in uncommon and obscure risks 
 
A technical expert in complex business logic risks that require a depth of understanding of the services and their architectures 
 
Ability to identify areas that are ripe for improvement and establish appropriate security goals 
 
Current on new security technologies, vulnerabilities, and methodologies 
 
Ability to develop proof of concept systems to automate security recommendations, vulnerability discovery, and process workflows 
 
Preferred Qualifications 
 
8+ years in an information security field; 4 or more of those years conducting security reviews 
 
Bachelors degree in Computer Science / Engineering or a related, with emphasis in security related fields (or equivalent experience) 
 
Experience constructing threat scenario narratives and building exploit chains 
 
Ability to reason about and influence software architecture for security 
 
Community contributions like public CVEs, bug bounty recognition, open source tools, blogs, talks etc. 
 
Minimum Qualifications 
 
4+ years in an information security field or software engineering; 2 or more of those years conducting security reviews 
 
2+ years of manually reviewing source code to assist in finding vulnerabilities 
 
Ability to adapt quickly to prioritization shifts and investigate unfamiliar technologies 
 
Extensive infrastructure, cloud, and application security experience 
 
Experience communicating risk to engineering and leadership teams 
 
Ability to reason about security of a large and complex application or infrastructure 
 
Experience going deep on complex systems for extended engagements 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $139,500 and $258,100, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Security Engineer - Deep Dive

International Turnkey Systems - ITS

<div>
 
 For a
 
 well-known Islamic Bank in Kuwait
 
 , we are hiring an AI Penetration Tester to join VMPT team and lead hands-on security testing for LLM/GenAI, ML, and AI-enabled applications (chatbots, RAG, AI agents, model APIs, and AI-assisted business workflows). The role blends traditional penetration testing + secure code review + vulnerability assessment with AI red teaming focused on modern AI risks such as prompt injection and insecure output handling as documented by OWASP&rsquo;s Top 10 for LLM Applications.
 
 
 Candidate is expected to have experience in assessing
 
 Python-based AI development and Azure AI / Azure OpenAI / Microsoft Foundry-hosted model endpoints
 
 .
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 
 
 
 AI / LLM penetration Testing &amp; Red Teaming
 
 
 <ul>
 <li>
 Plan and execute AI penetration tests for LLM/GenAI and ML solutions across the bank (AI apps, AI gateways, model endpoints, orchestration layers, RAG pipelines, plugins/tools).
 </li>
 <li>
 Design test cases aligned to OWASP Top 10 for LLM Applications (e.g., prompt injection, insecure output handling, sensitive info disclosure, supply-chain risks).
 </li>
 <li>
 Perform adversarial testing using threat-informed techniques and references such as MITRE ATLAS (adversary tactics/techniques for AI systems).
 </li>
 <li>
 Validate security of agentic workflows (tool invocation, function calling, permissions, memory, connectors) and verify least privilege + authorization boundaries.
 </li>
 </ul>
 
 
 Automation &amp; Tooling
 
 
 <ul>
 <li>
 Build Python-based test harnesses for repeatable AI security testing (fuzzing prompts, jailbreak suites, regression tests, evaluation scoring).
 </li>
 <li>
 Use and extend PyRIT (Python Risk Identification Tool) or equivalent frameworks to probe for jailbreaks/harms and automate adversarial scanning.
 </li>
 <li>
 Where applicable, leverage Microsoft Foundry capabilities such as the AI Red Teaming Agent (preview) that integrates PyRIT red teaming features.
 </li>
 </ul>
 
 
 Secure code review &amp; AppSec
 
 
 <ul>
 <li>
 Conduct secure code review (particularly Python) for AI application layers: prompt templates, RAG retrieval logic, output post-processing, input validation, secrets handling, authZ checks, and logging.
 </li>
 <li>
 Identify and help fix design flaws enabling data leakage, prompt manipulation, unsafe tool usage, or insecure output flows.
 </li>
 </ul>
 
 
 Traditional PT
 
 
 <ul>
 <li>
 Perform web/API/cloud penetration testing for AI-enabled applications (auth, session, API abuse, SSRF, injection, misconfigurations, secrets).
 </li>
 <li>
 Run vulnerability assessments, triage findings, define severity, and validate remediation (re-test).
 </li>
 </ul>
 
 
 
 
 
 Education and Qualification
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in computer science, Cybersecurity, Software Engineering, or related discipline.
 </li>
 <li>
 3&ndash;7 years in penetration testing / application security / red teaming.
 </li>
 <li>
 Demonstrated experience testing LLM/GenAI systems (prompt injection, jailbreaks, data exfiltration patterns, agent/tool abuse).
 </li>
 <li>
 Strong hands-on Python for security automation and test harness development.
 </li>
 <li>
 Practical experience with Azure security concepts (identity, networking, secrets, logging) and exposure to Azure AI / Azure OpenAI / Foundry style deployments.
 </li>
 <li>
 Strong report writing, clear communication, ability to work with developers on remediation.
 </li>
 </ul>
 
 
 A Must Certificates (at least one)
 
 
 <ul>
 <li>
 OffSec OSCP / OSCP+
 </li>
 <li>
 GIAC GPEN
 </li>
 <li>
 Microsoft Certified: Azure Security Engineer Associate (AZ-500)
 </li>
 <li>
 ISC2 CCSP
 </li>
 </ul>
 
 
 Strongly Preferred
 
 
 <ul>
 <li>
 OffSec OSWE (advanced web exploitation / white-box testing)
 </li>
 <li>
 Burp Suite Certified Practitioner (BSCP)
 </li>
 <li>
 Microsoft Certified: Azure AI Engineer Associate (AI-102) (helps align with Azure AI implementation patterns).
 </li>
 </ul>
 
 
 Tools &amp; Technologies Skills
 
 
 <ul>
 <li>
 Python, Git, CI/CD integration
 </li>
 <li>
 Burp Suite, common PT toolchains (Kali, scanners, API tooling)
 </li>
 <li>
 Azure security controls (identity, key management, logging/monitoring)
 </li>
 <li>
 AI red teaming tooling (e.g., PyRIT / Foundry scans)
 </li>
 </ul>
 
 
</div>

AI Penetration Testing Specialist

Search 10000+ Red team engineer jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 red team engineer jobs Near Me

Offensive Security Engineer

Information Security Engineer - Offensive Security

Staff Security Engineer – Red Team (AI)

Staff Security Engineer – Red Team (AI)

Deloitte Innovation Hub | Cyber Security | Offensive Security Senior Engineer, Cairo, Egypt.

Security Engineer - Deep Dive

AI Penetration Testing Specialist