Loading...
LeadFull-timePythonRustRailsAWSAzureAI
Salary Range
$30,600 - $41,400 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
Rubrik Zero Labs is seeking a Staff Security Engineer to lead their Adversary Emulation Program. This role involves researching global threat landscapes and developing automated attack playbooks for cyber-attack simulations across various environments.
Key Responsibilities
- →Analyze real-world ransomware, wiper-ware, and insider threat TTPs across diverse workloads
- →Design and author automated attack logic using Ansible, Python, and YAML
- →Create Scenario Manifests defining blast radius, risk level, and success criteria
- →Develop rigorous Circuit Breaker logic to ensure simulations remain within isolated recovery environments
- →Map simulations to the MITRE ATT&CK framework and Rubrik-specific recovery checkpoints
Requirements
- ✓12+ years in Red Teaming, Threat Emulation, or Malware Analysis
- ✓Expert-level proficiency in Ansible and Python for infrastructure-as-code and attack orchestration
- ✓Deep understanding of OS internals (Windows/Linux), Database structures, and Cloud Identity providers
- ✓Proven experience building offensive tools in production-adjacent environments with strict safety requirements
- ✓Certifications like OSCP, OSCE, GCIH, GCFA, or AWS Security are preferred
- ✓Summary Bullets
- ✓Lead Adversary Emulation Program for cyber-attack simulations
- ✓Research global threat landscape and develop attack playbooks
- ✓Design automated attack logic using Ansible, Python, and YAML
- ✓Ensure simulation safety with Circuit Breaker logic
- ✓Map simulations to MITRE ATT&CK framework
- ✓Require 12+ years in Red Teaming or related fields
- ✓Expertise in Ansible, Python, and infrastructure-as-code
- ✓Requirement Bullets
- ✓12+ years in Red Teaming, Threat Emulation, or Malware Analysis
- ✓Expert-level proficiency in Ansible and Python
- ✓Deep understanding of OS internals, Database structures, and Cloud Identity providers
- ✓Proven experience building offensive tools in production-adjacent environments
- ✓Certifications like OSCP, OSCE, GCIH, GCFA, or AWS Security are preferred
- ✓Strong understanding of MITRE ATT&CK framework
- ✓Experience with infrastructure-as-code and attack orchestration
- ✓Benefit Bullets
- ✓[]
Free to sign up. Takes 30 seconds.
