{"id":3984475,"url":"https://alion.io/job/keybank-senior-offensive-security-engineer-red-team","title":"Senior Offensive Security Engineer (Red Team)","company":{"id":450627,"name":"KeyBank","domain":"key.com","url":"https://alion.io/company/key-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":87,"open_postings":49,"ghost_share":0,"stale_share":0.51,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":96000,"max":181000,"currency":"USD","period":"year","gross":null,"usd_annual":181000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"JavaScript","optional":false},{"name":"Kali Linux","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-09T21:06:01Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-10T09:24:07Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Location:\n4910 Tiedeman Road, Brooklyn OhioPosition Summary\nOur Cyber Adversary and Exposure Mgmt. team rolls up into Key’s broader Cyber Defense function within Corporate Information Security. Cyber Defense’s mission is simple: We aim to Deter, Detect, Deny, and Disrupt adversaries through proactive threat centric defense.\nThe Senior Offensive Security Engineer is a key member of the Cyber Defense Cyber Adversary and Exposure Mgmt. team, responsible for simulating advanced persistent threats (APTs) and emulating real-world adversaries to assess and improve KeyBank’s detection, response, and resilience capabilities. This role goes beyond traditional red teaming and penetration testing by incorporating threat intelligence, custom tooling, and stealthy tradecraft to test the effectiveness of security controls and incident response processes. \nThe ideal candidate will have prior extensive experience in adversary simulation, red teaming, and offensive security operations across hybrid environments (on-prem, cloud, and physical). This role requires advanced technical acumen, creativity, and the ability to communicate complex findings to both technical and executive audiences.\nKey Responsibilities\nLead and execute adversary emulation engagements using intelligence-driven threat scenarios aligned with frameworks such as MITRE ATT&CK.\nDesign and conduct full-scope red team operations, including initial access, lateral movement, privilege escalation, and data exfiltration simulation.\nConduct physical, external/internal, and wireless network assessments, as well as web and mobile application testing.\nLead security assessments across cloud platforms (Google Cloud, Microsoft Azure, AWS) and embedded systems.\nDevelop and test threat actor emulation tools, tactics, and procedures for the Red Team to employ on-demand in assessments of application, system, cloud, and network security controls.\nEmploy these tools and techniques in the KeyBank environment with minimal supervision while also mentoring the team in their safe and responsible usage.\nPartner with the Cyber Threat Intelligence team to ensure Red Team capabilities and tactics accurately reflect the current threat landscape and real-world-TTPs are translated into emulation plans.\nLead cross-functional teams during project testing phases and architectural design reviews to ensure appropriate security controls are in place to mitigate threats.\nCoordinate and monitor third-party penetration testing engagements, ensuring alignment with requirements, effective communication, and timely, accurate reporting.\nCreate Red Team metrics and reporting to track program effectiveness and stakeholder visibility.\nLead efforts to track remediation of findings to completion through coordination with application and technology system owners.\nExpand the team’s capabilities through:\nCreation of custom tools and automation frameworks.\nResearch and development of novel offensive techniques and tradecraft.\nIncorporation of threat actor intelligence into emulation scenarios.\nDelivery of internal presentations and knowledge-sharing sessions.\nEvaluate the effectiveness of detection and response capabilities across SOC, EDR/XDR, SIEM, and other security layers.\nProvide detailed post-mortem reports and executive briefings with prioritized recommendations.\nMentor junior team members and contribute to the development of adversarial tradecraft within the team.\nBuild a relationship with blue teams to conduct purple team exercises and improve detection engineering.\nContribute to the continuous improvement of adversarial emulation methodologies, tooling, and documentation.\nRequired Qualifications\nMaster’s in computer science, Cybersecurity, or related field-or equivalent experience.\n8+ years of experience in Red Team or Penetration Testing roles.\nProficiency with Red Team tools and Command & Control (C2) frameworks.\nStrong scripting and programming skills in PowerShell, Python, JavaScript, Bash, Golang or similar languages.\nDeep understanding of Windows, Linux, Kali Linux, and macOS operating systems.\nDirect experience with one or more of the following:\nGoogle Cloud, Microsoft Azure, and AWS platforms.\nAdvanced networking knowledge and experience with attack simulation.\nDeep understanding of the MITRE ATT&CK framework and adversary TTPs.\nDeep understanding of one or more Penetration Testing Methodologies such as PTES, ISECOM, ISSAF, and OSSTMM\nStrong research and reporting skills.\nWillingness to travel for on-site assessments.\nPreferred Certifications\nOffensive Security Certified Professional (OSCP)\nOffensive Security Certified Expert (OSCE)\nOffensive Security Experienced Penetration Tester (OSEP)\nCertified Red Team Professional (CRTP)\nGIAC Penetration Tester (GPEN)\nGIAC Web Application Penetration Tester (GWAPT)\nCREST Registered Penetration Tester / CBEST Qualifications\nCOMPENSATION AND BENEFITS\nThis position is eligible to earn a base salary in the range of $96,000.00 - $181,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.Please click here for a list of benefits for which this position is eligible.\nKey has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.\nJob Posting Expiration Date: 12/04/2026\n\nKeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing .\n#LI-Remote","description_format":"text","description_chars":6194,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Commercial & Retail Banks","Wealth Management & Financial Advisors","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-11-09T21:06:01Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 38 · green card filings: 24","filings_12m":38,"filings_prev_12m":38,"green_card_filings_12m":24,"median_offered_wage_usd":117258,"route":null,"cap_exempt":false,"checked_at":"2026-11-10T11:34:35+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":31,"reasons":["conf:3","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-10T06:52:35Z"},"pay":{"stated_usd_annual":181000,"is_top_pay":true},"html_url":"https://alion.io/job/keybank-senior-offensive-security-engineer-red-team","json_url":"https://alion.io/job/keybank-senior-offensive-security-engineer-red-team.json","meta":{"generated_at":"2026-11-10T18:40:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8861,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":450627},"rest":"https://alion.io/mcp/rest/get_company?id=450627"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkeybank-senior-offensive-security-engineer-red-team"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkeybank-senior-offensive-security-engineer-red-team"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkeybank-senior-offensive-security-engineer-red-team"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/keybank-senior-offensive-security-engineer-red-team\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkeybank-senior-offensive-security-engineer-red-team"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3984475}},{"tool":"search_jobs","arguments":{"company":"key.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3984475},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}