{bc}
Apply
workday

IND Associate Software Engineer - Red Team Engineer

The Hartford
IND
Full-time
Junior · 1–3 years experience
Discovered 2 days ago
awsazuregcplinuxpowershellpython

Full Job Posting

What You Bring

  • Experience: 1 to 3 years in offensive security, penetration testing, Red Team operations, adversary simulation, or hands-on security engineering with offensive testing exposure.
  • Technical foundation: Solid working knowledge of Windows and Linux internals, cloud security, AI/LLM, common enterprise attack paths, and at least one major cloud platform such as AWS, Azure, or GCP.
  • Framework fluency: Practical familiarity with MITRE ATT&CK, including the ability to map and demonstrate Red Team procedures against tactics, techniques, objectives, and enterprise risk.
  • Scripting and tooling: Practical experience writing or modifying scripts in PowerShell, Python, Go, Rust, or C#, with enough depth to automate operator tasks, adapt approved tooling, handle output, and troubleshoot execution issues.
  • Operator mindset: Ability to think through attack paths, adjust safely when assumptions fail, maintain discipline under scope constraints, and document what worked, what failed, and why.
  • Communication: Clear technical writing, disciplined evidence handling, and the ability to explain attack paths, impact, and remediation context to technical audiences without overstating findings.
  • Automated security testing: Experience planning and managing test execution across a range of automated security testing tools, validating results, tracking coverage, and delivering clear, actionable reports.
  • Certifications (nice to have): OSCP, CRTO/CRTP, or similar hands-on security certifications.
  • About Us | Our Culture | What It’s Like to Work Here

Qualifications

  • Experience: 1 to 3 years in offensive security, penetration testing, Red Team operations, adversary simulation, or hands-on security engineering with offensive testing exposure.
  • Technical foundation: Solid working knowledge of Windows and Linux internals, cloud security, AI/LLM, common enterprise attack paths, and at least one major cloud platform such as AWS, Azure, or GCP.
  • Framework fluency: Practical familiarity with MITRE ATT&CK, including the ability to map and demonstrate Red Team procedures against tactics, techniques, objectives, and enterprise risk.
  • Scripting and tooling: Practical experience writing or modifying scripts in PowerShell, Python, Go, Rust, or C#, with enough depth to automate operator tasks, adapt approved tooling, handle output, and troubleshoot execution issues.
  • Operator mindset: Ability to think through attack paths, adjust safely when assumptions fail, maintain discipline under scope constraints, and document what worked, what failed, and why.
  • Communication: Clear technical writing, disciplined evidence handling, and the ability to explain attack paths, impact, and remediation context to technical audiences without overstating findings.
  • Automated security testing: Experience planning and managing test execution across a range of automated security testing tools, validating results, tracking coverage, and delivering clear, actionable reports.
  • -
  • 1 to 3 years in offensive security, penetration testing, Red Team operations, adversary simulation, or hands-on security engineering with offensive testing exposure.
  • About Us | Our Culture | What It’s Like to Work Here

Preferred Qualifications

  • Certifications (nice to have): OSCP, CRTO/CRTP, or similar hands-on security certifications.

Responsibilities

  • Support operations: Assist in planning and execution of approved adversary simulation exercises across endpoints, identity, applications, cloud, and third-party integrations, with guidance from senior operators.
  • Execute adversary tradecraft: Operate across initial access simulation, internal discovery, credential access testing, privilege escalation, lateral movement, command-and-control simulation, and objective-based actions within approved scope.
  • Map procedures and findings to MITRE ATT&CK to keep tradecraft, reporting, and scenario design consistent across exercises.
  • Track operational outcomes: Collect command output, screenshots, logs, timelines, access paths, affected assets, and constraints so findings are defensible and reproducible.
  • Build technical depth: Help maintain lab environments, test infrastructure, and approved tooling while following established safety and OPSEC practices.
  • Learn and share tradecraft: Contribute to team standards, document lessons learned, and participate in peer reviews of techniques, findings, and reports.
  • Apply and assess LLMs: Use LLMs to support authorized offensive security operations, including research, scripting, analysis, tooling, and workflow automation, and evaluate LLM-enabled systems for weaknesses that could contribute to an attack path.
  • Follow safety and compliance practices: Operate within defined scope, approvals, deconfliction steps, and engagement rules for all activities.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at The Hartford

IND Staff Engineer, Infrastructure

, IND

Discovered 2 days agoFull-time

IND Red Team Engineer, Security

, IND

Discovered 2 days agoFull-time

General Liability Claim Consultant/Specialist - Personal and Advertising Injury Liability

Hartford, USA

Discovered 2 days agoFull-time

Manager Learning Measurement and Impact

Hartford, USA

Discovered 3 days agoFull-time

Workers’ Compensation Senior Claim Representative

Hartford, USA

Discovered 3 days agoFull-time

Inland Marine Underwriter

Charlotte, USA

Discovered 4 days agoFull-time

2027 Summer Intern - Marketing Communications

Wayne, USA

Discovered 4 days agoFull-time

2027 Summer Intern - Accounting

Wayne, USA

Discovered 4 days agoFull-time