{bc}
oracle

Sr Information Security Engineer - Security Red Team

Williams-Sonoma, Inc.
Brooklyn, USA
Full-time
Senior · 5+ years experience
Onsite
Discovered 1 weeks ago

Full Job Posting

Responsibilities

  • Plan and lead authorized internal and external penetration tests, adversary simulations, and Red Team engagements across enterprise environments.
  • Define engagement scope, objectives, rules of engagement, written authorization, testing windows, safety controls, and communication plans to minimize production disruption.
  • Coordinate internal Red Team engineers and external penetration-testing vendors, including deliverables and follow-up testing.
  • Conduct or direct assessments of Active Directory and identity attack paths, cloud environments, web applications, APIs, and infrastructure.
  • Lead Purple Team exercises with SOC and Detection Engineering to validate visibility, detection coverage, and response effectiveness.
  • Conduct authorized social engineering assessments in accordance with approved scope and company policy.
  • Apply tools such as Cobalt Strike, BloodHound Enterprise, Burp Suite, Metasploit, and Kali Linux where appropriate to approved engagements.
  • Produce clear technical reports and executive-level summaries that explain exposure, business impact, evidence, and prioritized remediation recommendations.
  • Coordinate remediation follow-up, validation, and retesting with application, infrastructure, and security owners.
  • Mentor team members, develop reusable engagement methodologies, and identify safe opportunities for automation and AI-assisted analysis.
  • Criteria
  • 5+ years of experience in offensive security, penetration testing, Red Team operations, or related security engineering.
  • Demonstrated experience leading authorized security assessments and communicating findings to varied audiences.
  • Hands-on knowledge of enterprise identity, networking, operating systems, cloud platforms, and web application security.
  • Experience documenting scope, safety controls, evidence, and actionable remediation guidance.
  • Ability to coordinate cross-functional engagements and lead technical work without direct-report authority.
  • Experience with Cobalt Strike, BloodHound Enterprise, Burp Suite, Metasploit, and Kali Linux preferred.
  • Experience conducting Purple Team exercises and mapping observations to MITRE ATT&CK preferred.
  • Relevant offensive security certifications or experience with scripting and assessment automation preferred.
  • This role requires being onsite in the Brooklyn, NY office Monday through Thursday.
  • Our Culture & Values
  • We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.
  • People First
  • Putting People First means investing in overall well-being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available

Preferred Qualifications

  • Experience with Cobalt Strike, BloodHound Enterprise, Burp Suite, Metasploit, and Kali Linux preferred.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Williams-Sonoma, Inc.