This is a fully remote position, open to applicants in Poland.

📋 Description

• Lead adversary emulation, red/purple team operations, and offensive validation efforts

• Develop and enhance the strategy for offensive validation

• Oversee campaign planning, establish rules of engagement, ensure legal/safety governance, and manage reporting and remediation validation

• Create adversary-emulation campaigns and rules of engagement aligned with MITRE ATT&CK/ATLAS and business objectives

• Engineer and cultivate offensive capabilities, including tradecraft, tooling, command and control setup, and automation for consistent, safe operations

• Design the purple-team framework and the detection-validation feedback loop in collaboration with detection engineering

• Formulate the sustainability and governance model, which includes standards for safe operations, coordination for legal/safety, evidence management, and the cadence for remediation validation

• Work autonomously while collaborating with detection engineering, threat intelligence, identity and access management, cloud, and application teams

⛳️ Requirements

• Significant experience in offensive security or red team operations, ideally 7–9 years, including leadership of engagements

• Proven experience in planning and executing adversary emulation and red/purple team operations in accordance with MITRE ATT&CK, encompassing rules of engagement and safe operational practices

• Practical exploitation and attack-path expertise across Windows/Active Directory, identity, cloud, and application environments

• Familiarity with command-and-control and offensive tools such as Cobalt Strike, Mythic, BloodHound, or Burp Suite

• Experience in translating offensive findings into prioritized improvements for control and detection in collaboration with detection engineering and stakeholder teams

• Proven track record of coordinating global engagements within legal and works council contexts