Offensive Security Engineer (Red Team)

Overview

Conduct red team operations and offensive security assessments across cloud environments, while partnering with engineering and security teams to drive remediation and validate detection coverage.

What you'll do

• Plan and execute red team operations and adversary simulations.
• Assess cloud infrastructure, identity architectures, CI/CD pipelines, containers, and cloud-native services.
• Identify and validate attack paths involving IAM, secrets, metadata, automation, and cloud configurations.
• Test logging, alerting, monitoring, and incident response processes with blue team and detection engineering teams.
• Track emerging attacker techniques, cloud exploitation trends, and abuse paths.

What you'll need

• 5+ years of experience in offensive security, red teaming, penetration testing, and detection validation.
• Familiarity with attacker tactics, techniques, and procedures.
• Ability to map findings to frameworks such as MITRE ATT&CK.
• Ability to write concise, actionable reports.
• Ability to communicate complex technical issues to diverse stakeholders.

Nice to have

• Certifications such as OSCP, OSEP, GXPN, GPEN, or cloud security certifications.

Details

• Remote in Canada.
• Compensation: CAD 146,000–190,000 per year.