Security Engineer

Role Overview

We are seeking a highly skilled Security Engineer with expertise in threat simulation, the MITRE ATT&CK framework, and scripting. The ideal candidate will have a strong background in penetration testing, red teaming, or threat emulation, along with hands-on experience in BAS (Breach and Attack Simulation) tools. The role involves evaluating security posture, simulating real-world attack scenarios, and collaborating with SOC, threat intelligence, and automation teams to strengthen defenses.

Key Responsibilities

• Design, execute, and manage threat simulations aligned with the MITRE ATT&CK framework.
• Conduct penetration testing, red team exercises, and threat emulation to identify vulnerabilities.
• Utilize BAS tools (SafeBreach, AttackIQ, Cymulate, Picus, XM Cyber, Pentera, ThreatSimulator, Verodin) for continuous security validation.
• Develop and maintain custom attack scenarios using scripting languages (Python, PowerShell, Bash, etc.).
• Collaborate with SOC teams to enhance incident detection and response capabilities.
• Integrate BAS outputs with threat intelligence feeds and security automation platforms.
• Provide actionable remediation guidance to improve security control effectiveness.
• Create technical reports and present findings to both technical and non-technical stakeholders.

Required Skills & Qualifications

• Strong knowledge of threat simulation methodologies and the MITRE ATT&CK framework.
• Proven experience in

  penetration testing, red teaming, or threat emulation

  .
• Hands-on experience with

  BAS platforms

  such as SafeBreach, AttackIQ, Cymulate, Picus, XM Cyber, Pentera, ThreatSimulator, or Verodin.
• Proficiency in

  scripting languages

  (Python, PowerShell, Bash, etc.).
• Familiarity with SOC operations, threat intelligence workflows, and security automation.
• Solid understanding of network protocols, endpoints, cloud environments, and security controls.
• Industry certifications preferred (OSCP, CRTO, CEH, GPEN, GCTI, etc.).

Preferred Qualifications

• Experience integrating BAS tools with SIEM/SOAR platforms.
• Knowledge of hybrid and cloud security architectures.
• Exposure to advanced persistent threat (APT) simulations and purple teaming exercises.

  Role & responsibilities

Preferred candidate profile