{"id":3979965,"url":"https://alion.io/job/outsourcing-services-international-red-team-security-engineer","title":"Red Team Security Engineer","company":{"id":4529139,"name":"Outsourcing Services International","domain":null,"url":"https://alion.io/company/outsourcing-services-international-3","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Managua, Nicaragua"],"countries":["NI"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Git","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-09T17:29:33Z","employer_posted_date":null,"last_verified_at":"2026-11-09T17:29:33Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"GENERAL DESCRIPTION\nRed Team capability is a core requirement for this position. Equally important is the ability to build and?maintain?automation across SIEM, SOAR, security tooling, APIs, and analyst workflows. The engineer will also?participate?in security analyst activities as operational needs require, including alert investigation, incident response, threat hunting, detection engineering, and security platform support.\nThe ideal candidate is comfortable moving between offensive and defensive security: conducting an adversary simulation one day, developing automated investigation or response workflows the next, and supporting an active security investigation when needed.\nESSENTIAL DUTIES AND RESPONSIBILITIES \nPlan and execute authorized Red Team engagements that simulate realistic?threat?actors and attack paths.\nConduct reconnaissance, exploitation, privilege escalation, lateral movement, persistence, and other adversary techniques within approved rules of engagement.\nAssess security controls across endpoints, identity platforms, networks, applications, cloud environments, and security infrastructure.\nPerform attack-path analysis and?identify?opportunities where multiple weaknesses can be combined to create material business risk.\nDevelop and?maintain?offensive security tools, scripts, payloads, and testing infrastructure.\nApply the MITRE ATT&CK framework to Red Team planning, execution, reporting, and detection validation.\nTest the organization’s ability to prevent, detect, investigate, and respond to adversary activity.\nPartner with Blue Team/Security Operations personnel to conduct purple-team exercises and improve defensive capabilities.\nClearly document attack paths, evidence, business impact, control gaps, and recommended remediation.\nDesign, develop,?maintain, and improve SIEM and SOAR automation supporting investigation, enrichment, containment, response, and case management.\nBuild integrations between security platforms using APIs, webhooks, scripts, and other automation technologies.\nDevelop automated enrichment workflows incorporating endpoint, identity, network, cloud, threat intelligence, vulnerability, and asset information.\nAutomate common analyst activities such as indicator enrichment, alert triage, evidence collection, account investigation, endpoint investigation, case creation, notification, and response actions.\nDevelop reusable scripts and tools using technologies such as Python, PowerShell, REST APIs, JSON, and Git-based development workflows.\nImplement?appropriate testing, logging, error handling, documentation, access controls, and change management for security automation.\nMeasure automation effectiveness, including analyst time saved, investigation time, response time, false-positive reduction, and workflow reliability.\nContinuously?identify?opportunities to reduce analyst workload while improving security coverage and response consistency.\nTranslate Red Team activity and emerging adversary techniques into actionable detection opportunities.\nPerform detection validation and?identify?gaps between expected and actual security telemetry.\nImprove alert quality through tuning, enrichment, correlation, suppression, and automation.\nConduct threat hunting based on adversary behaviors, threat intelligence, Red Team findings, and?observed?environmental risks.\nInvestigate security alerts and suspicious activity across?endpoint, identity, network, email, cloud, and application environments.\nPerform alert triage, evidence collection, scoping, escalation, containment, and remediation activities.\nSupport incident response investigations and coordinate technical response actions.\nAnalyze endpoint, authentication, network, cloud, and other security telemetry.\nInvestigate suspicious users, systems, processes, files, domains, IP addresses, and other indicators.\nDocument investigations and?maintain?appropriate case?records.","description_format":"text","description_chars":3907,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing"],"lifecycle":[{"event":"open","at":"2026-11-09T19:24:30Z"}],"visa":[],"liveness":{"score":52,"band":"ok","label":"Likely open","p_open":1,"p_active":0.516,"p_room":1,"age_days":0,"expected_fill_days":25,"reasons":["seen:0","agency","win:early"],"computed_at":"2026-11-10T06:52:35Z"},"pay":null,"html_url":"https://alion.io/job/outsourcing-services-international-red-team-security-engineer","json_url":"https://alion.io/job/outsourcing-services-international-red-team-security-engineer.json","meta":{"generated_at":"2026-11-10T21:47:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":129,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4529139},"rest":"https://alion.io/mcp/rest/get_company?id=4529139"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foutsourcing-services-international-red-team-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foutsourcing-services-international-red-team-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foutsourcing-services-international-red-team-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/outsourcing-services-international-red-team-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foutsourcing-services-international-red-team-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3979965}},{"tool":"search_jobs","arguments":{"company":4529139,"detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3979965},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}