Breach & Attack Simulation Engineer

The Breach and Attack Simulation Engineer role will provide ongoing support to the Regional Security Operations program. In this role the Breach and Attack Simulation Engineer is expected to perform offensive security activities to support the creation and management of continuous threat-based scenarios.

Essential Functions:

• Create, deploy, and manage continuous threat-based scenarios to validate or improve security infrastructure..
• Utilize offensive tooling and custom scripts to create and automate workflows and emulations.
• Develop metrics and reports that express validity of security structure and/or progression on threat coverage.
• Work with Detection Engineers to review emulation results to create detections and alerts.
• Educate Analyst on techniques used and alerts generated through automated or manual emulations for improved triaging by blue team.
• Collaborate with Cyber Threat Intelligence and other teams on new and pressing threats to emulate and measure.
• Contribute to red/purple team engagements
• Identify and maintain visibility of security tool coverage.

Requirements

• Offensive security experience with a passion for creating and automating workflows and emulations.
• Coding/scripting skills in popular languages such as C and Python.
• Extensive experience of offensive security.
• Extensive experience with EDR, AV, Firewall, and Email Security tooling.
• Proficiency for effective communication and documentation.
• Ability to express security issues and impact clearly to any audience.

Preferred Qualifications:

• Breach and Attack tooling experience (AttackIQ, Caldera, Atomic Red Team, etc.).
• A solid understanding of the need to continuously test security infrastructure.
• Security Write-ups, Security/automation projects.
• Aspiration to continuously challenge yourself and to a higher standard of expertise and readiness to tackle cybersecurity challenges, using tools such as HackTheBox and TryHackMe.
• Blue team mindset & experience is a plus.