1,831,020open jobs
105,451companies
274,837added this week
Browse all
Salary
$120k – $150k per year
Location
In office (Brooklyn)
Seniority
Senior · 5+ years exp

Confirmed on the employer's own hiring board on Oct 18, 2026. First seen by Alion on Oct 14, 2026. Williams-Sonoma scores B on the Alion truth index.

Overview
Company
Impact
Profile match
Williams-Sonoma is a specialty retailer of home furnishings and kitchenware headquartered in San Francisco, California, selling through e-commerce, catalogs and several hundred stores. Founded in 1956 by Chuck Williams in Sonoma, the company owns the Williams Sonoma, Pottery Barn, Pottery Barn Kids, Pottery Barn Teen, West Elm, Rejuvenation, Mark and Graham, GreenRow and Dormify brands, with operations in the US, Canada, Australia, the UK and India. Openings include store sales associates and design specialists, buyers and inventory planners, sourcing managers, loyalty and brand marketers, software and mobile engineers, warehouse supervisors and accountants.

About the Team

You will be part of the Enterprise Cyber Security organization responsible for evaluating the effectiveness of security controls and identifying opportunities to strengthen enterprise defenses. The Red Team works closely with Security Operations, Detection Engineering, Security Engineering, and business partners to assess realistic attack paths and improve resilience.

About the Role

As a Senior Information Security Engineer - Security Red Team, you will lead authorized offensive security engagements from planning through execution, reporting, and remediation validation. This is a hands-on technical lead role responsible for coordinating internal Red Team resources and external testing partners, translating technical findings into actionable risk reduction, and mentoring other engineers without formal people-management responsibilities.

Responsibilities

  • Plan and lead authorized internal and external penetration tests, adversary simulations, and Red Team engagements across enterprise environments.

  • Define engagement scope, objectives, rules of engagement, written authorization, testing windows, safety controls, and communication plans to minimize production disruption.

  • Coordinate internal Red Team engineers and external penetration-testing vendors, including deliverables and follow-up testing.

  • Conduct or direct assessments of Active Directory and identity attack paths, cloud environments, web applications, APIs, and infrastructure.

  • Lead Purple Team exercises with SOC and Detection Engineering to validate visibility, detection coverage, and response effectiveness.

  • Conduct authorized social engineering assessments in accordance with approved scope and company policy.

  • Apply tools such as Cobalt Strike, BloodHound Enterprise, Burp Suite, Metasploit, and Kali Linux where appropriate to approved engagements.

  • Produce clear technical reports and executive-level summaries that explain exposure, business impact, evidence, and prioritized remediation recommendations.

  • Coordinate remediation follow-up, validation, and retesting with application, infrastructure, and security owners.

  • Mentor team members, develop reusable engagement methodologies, and identify safe opportunities for automation and AI-assisted analysis.

Criteria

  • 5+ years of experience in offensive security, penetration testing, Red Team operations, or related security engineering.

  • Demonstrated experience leading authorized security assessments and communicating findings to varied audiences.

  • Hands-on knowledge of enterprise identity, networking, operating systems, cloud platforms, and web application security.

  • Experience documenting scope, safety controls, evidence, and actionable remediation guidance.

  • Ability to coordinate cross-functional engagements and lead technical work without direct-report authority.

  • Experience with Cobalt Strike, BloodHound Enterprise, Burp Suite, Metasploit, and Kali Linux preferred.

  • Experience conducting Purple Team exercises and mapping observations to MITRE ATT&CK preferred.

  • Relevant offensive security certifications or experience with scripting and assessment automation preferred.

  • This role requires being onsite in the Brooklyn, NY office Monday through Thursday.

Our Culture & Values

We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.

People First

Putting People First means investing in overall well-being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available:

Benefits

  • A generous discount on all WSI brands

  • A 401(k) plan and other investment opportunities

  • Paid vacations, holidays, and time off to volunteer

  • Health benefits, dental and vision insurance, including same-sex domestic partner benefits

  • Tax-free commuter benefits

  • A wellness program that supports your physical, financial and emotional health

Continued Learning

  • In-person and online learning opportunities through WSI University

  • Cross-brand and cross-function career opportunities

  • Resources for self-development

  • Advisor (Mentor) program

  • Career development workshops, learning programs, and speaker series

WSI will not now or in the future commence an immigration case or "sponsor" an individual for this position (for example, H-1B or other employment-based immigration).

This role is not eligible for relocation assistance.

Williams-Sonoma, Inc. is an Equal Opportunity Employer. Williams-Sonoma, Inc. will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance, or other applicable state or local laws and ordinances.

The expected starting pay range for this position is $120,000 - $150,000. Applicable pay ranges may differ across markets. Actual pay will be determined based on experience and other job-related factors permitted by law. In addition to competitive pay, compensation may include a variety of other components like benefits, paid time off, merit, and bonus opportunities.

Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
1,831,020 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Create a free account Continue with Google
Free forever. No card. Under a minute.

Your match

How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.

Recommended for you based on this role

Security
Similar stack
Same company
Brooklyn
$190k – $290k per year • In office • San Francisco
Apply
≈ $38k – $100k per year (Estimated) • In office • Tokyo
Apply
$91k – $163k per year • Remote (United States) • Full-Time
Python
AI/ML
NIST AI RMF
Cybersecurity
ISO 27001
NIST CSF
Zero Trust
Defense in Depth
Least Privilege
Threat Modeling
Apply
≈ $98k – $181k per year (Estimated) • In office • Full-Time • Bucharest
Python
JavaScript
DevOps
GCP
Azure
AWS
Docker
Kubernetes
Cybersecurity
Burp Suite
OWASP Top 10
Active Directory
Apply
≈ $97k – $179k per year (Estimated) • In office • Full-Time • Bucharest
DevOps
GCP
Azure
AWS
Docker
Kubernetes
Cybersecurity
Burp Suite
Active Directory
Apply
Penetration Tester 1 day ago
≈ $62k – $173k per year (Estimated) • In office • Full-Time • Sydney
Python
Ruby
PowerShell
Bash
AI/ML
Red Teaming
DevOps
GCP
Azure
AWS
Linux
Windows
Cybersecurity
Burp Suite
Metasploit
Nmap
Nessus
Cobalt Strike
ISO 27001
OWASP Top 10
CVE
CVSS
Apply
$86k – $138k per year • In office • TS/SCI • 2+ years exp • Bachelor's Degree • Arlington
Python
JavaScript
PowerShell
Bash
AI/ML
Red Teaming
DevOps
GCP
Kali Linux
Azure
AWS
Linux
Cybersecurity
Burp Suite
Metasploit
Nmap
NIST 800-53
Active Directory
PKI
OWASP
Apply
Pentester Sênior 2 days ago
≈ $48k – $111k per year (Estimated) • Hybrid • São Paulo
Python
PowerShell
Frontend
GraphQL
DevOps
Rest API
GCP
Azure
AWS
SOAP
Cybersecurity
Burp Suite
Metasploit
Nmap
Impacket
BloodHound
OWASP Top 10
CVSS
Frida
Active Directory
OWASP
Apply
$4.3k – $5.9k per year • Hybrid • 2+ years exp • Almaty
Python
Bash
DevOps
Splunk
Git
Docker
VirtualBox
Linux
TCP/IP
DNS
DHCP
VPN
Cybersecurity
Wireshark
Burp Suite
Metasploit
Nmap
Wazuh
Suricata
Zeek
Hashcat
Scapy
John the Ripper
Gobuster
OWASP Top 10
SIEM
OWASP
Apply
≈ $8k – $19k per year (Estimated) • In office • 1+ year exp • Samarkand
Python
JavaScript
SQL
C#
C++
Databases
MySQL
PostgreSQL
SQLite
DevOps
Kali Linux
VMWare
Git
Docker
Ubuntu
VirtualBox
GitHub
GitLab
Linux
Windows
TCP/IP
VPN
Cybersecurity
OWASP Top 10
Management
Microsoft Office
Apply
$75k – $90k per year • In office • 1+ year exp • Bachelor's Degree • Rocklin
Python
PowerShell
DevOps
IAM
Cybersecurity
PCI DSS
Least Privilege
Microsoft Entra ID
Ping Identity
Delinea
Active Directory
Management
Service Desk
Apply
$105k – $125k per year • In office • 3+ years exp • Bachelor's Degree • Rocklin
Python
PowerShell
DevOps
IAM
Linux
Windows
TCP/IP
DNS
DHCP
Cybersecurity
Crowdstrike
Google SecOps
Tanium
Ping Identity
Delinea
SIEM
Apply
$105k – $125k per year • In office • 3+ years exp • Bachelor's Degree • San Francisco
Python
PowerShell
DevOps
IAM
Linux
Windows
TCP/IP
DNS
DHCP
Cybersecurity
Crowdstrike
Google SecOps
Tanium
Ping Identity
Delinea
SIEM
Apply
$100k – $130k per year • In office • 3+ years exp • Bachelor's Degree • Brooklyn
DevOps
Prometheus
Cortex
Cybersecurity
Crowdstrike
MISP
Google SecOps
Cortex XSOAR
Tanium
SIEM
Apply
$100k – $130k per year • In office • 3+ years exp • Bachelor's Degree • Brooklyn
DevOps
Prometheus
Cortex
Cybersecurity
Crowdstrike
MISP
Google SecOps
Cortex XSOAR
Tanium
SIEM
Apply
$34k per year • In office • Part-Time • High School Diploma • Brooklyn
Apply
$36k – $42k per year • In office • Part-Time • 1+ year exp • High School Diploma • Brooklyn
Apply
$63k per year • In office • 1+ year exp • Bachelor's Degree • Brooklyn
Apply
≈ $37k – $83k per year (Estimated) • In office • Brooklyn
Apply
$50k – $56k per year • In office • Full-Time • 1+ year exp • Brooklyn
Apply
See all jobs
This is one of many
1,831,020 more open roles from verified company boards, updated every day.