3 days ago
Remote, United StatesSenior
Base Salary
$96k - $181k/yr
Responsibilities
- Lead and execute intelligence-driven adversary emulation and full-scope red team engagements aligned with MITRE ATT&CK.
- Conduct physical, external, internal, wireless, web application, mobile application, cloud, embedded systems, application, system, and network security assessments.
- Develop and test custom threat actor emulation tools, automation frameworks, tactics, procedures, and offensive tradecraft.
- Use offensive tools and techniques with minimal supervision while mentoring team members on safe and responsible usage.
- Partner with Cyber Threat Intelligence to translate current threat actor intelligence and TTPs into emulation plans.
- Lead cross-functional testing phases and architectural design reviews to assess security controls.
- Coordinate and monitor third-party penetration testing engagements and ensure accurate, timely reporting.
- Create red team metrics and reports, track remediation through completion, and provide post-mortem reports and executive briefings.
- Evaluate SOC, EDR/XDR, SIEM, and other security-layer detection and response capabilities.
- Lead purple team exercises with blue teams and improve detection engineering, methodologies, tooling, and documentation.
- Mentor junior team members and deliver internal presentations and knowledge-sharing sessions.
Requirements
- Master's degree in computer science, cybersecurity, or a related field, or equivalent experience.
- At least 8 years of experience in red team or penetration testing roles.
- Proficiency with red team tools and command-and-control frameworks.
- Strong scripting and programming skills in PowerShell, Python, JavaScript, Bash, Golang, or similar languages.
- Deep understanding of Windows, Linux, Kali Linux, and macOS operating systems.
- Direct experience with one or more of Google Cloud, Microsoft Azure, and AWS.
- Advanced networking knowledge and attack simulation experience.
- Deep understanding of the MITRE ATT&CK framework and adversary TTPs.
- Deep understanding of one or more penetration testing methodologies, including PTES, ISECOM, ISSAF, or OSSTMM.
- Strong research and reporting skills.
- Willingness to travel for on-site assessments.
- Preferred certifications include OSCP, OSCE, OSEP, CRTP, GPEN, GWAPT, CREST Registered Penetration Tester, and CBEST.
Benefits
- Base salary range is $96,000.00-$181,000.00 annually, with eligibility for incentive compensation; compensation figures are excluded from benefit details.
- Benefits are available according to the employer's eligible benefits program.
- The employer prioritizes in-office presence while offering flexible options when the role can be performed effectively in a mobile environment.
- The role may require travel for on-site assessments.
- The job posting expires December 4, 2026.
About KeyBank
KeyBank, the primary banking subsidiary of KeyCorp (NYSE: KEY), provides retail and commercial banking, payments, wealth management, and equipment financing to consumers and businesses across the United States. Headquartered in Cleveland, it operates a branch-based and digital model, earning interest and fee income from deposits, lending, treasury services, and investment products. KeyCorp was formed in 1994 through the merger of Society Corp. and KeyCorp, creating one of the country’s largest regional banks.