Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 5 years of experience in a technical security role (e.g., security engineering, security research, DevSecOps, or incident response).
• Experience with vulnerability assessments and vulnerability exploitation.
• Experience in security and ethical hacking.
  

Preferred qualifications:

• 3 years of offensive security experience (red teaming, vulnerability research, pen testing, etc - not just running tools) in Cloud environment.
• Experience with Artificial Intelligence.
• Ability to develop custom exploits, modify existing exploits, and bypass security controls.
• Fluency in programming languages relevant to security and cloud automation (e.g., Python, Go, Bash).
• Being able to clearly and concisely articulate complex technical findings, risks, and remediation strategies to both technical and non-technical audiences, both verbally and in writing.

About the job

Responsibilities

• Define and maintain the roadmap for one of the programs within Cloud Red Team, while collaborating within a highly-skilled team to plan and execute attacks against Cloud’s products, services, and infrastructure.
• Build tools and infrastructure to support attacker goals, while identifying vulnerabilities and attack vectors across Cloud services, configurations, and related technologies.
• Participate in threat modeling exercises to identify potential attack paths and weaknesses in Cloud architectures and deployments.
• Design realistic and relevant attack scenarios based on current threat intelligence and the specific Cloud environment being assessed.
• Create reports that capture the insights gained during an attack and present them to a variety of audiences.