Lead Cybersecurity Engineer - Breach & Attack Simulation

The Cyber Security Engineering Senior Associate for Breach and Attack Simulation (BAS) supports the design, execution, and continuous improvement of adversary simulation and security control validation activities. Working under the direction of the Associate Director, the role safely emulates relevant threat behaviors, validates preventive and detective controls, documents findings, and partners with security and technology teams to improve detection coverage, response readiness, and cyber resilience across on-premises, cloud, and hybrid environments.
 

Specific Responsibilities

• Execute BAS scenarios and adversary emulation exercises in accordance with approved scope, rules of engagement, change requirements, and safety controls.

• Translate threat intelligence, organizational risks, and control requirements into repeatable simulation scenarios that safely test enterprise defenses.

• Develop, configure, test, and maintain BAS platform content, attack scenarios, schedules, integrations, automation, and evidence collection.

• Map simulation activities, techniques, and findings to MITRE ATT&CK and other relevant frameworks to support consistent control coverage analysis and reporting.

• Validate preventive and detective controls across identity, endpoint, network, application, cloud, and data environments, and confirm whether expected alerts and response workflows operate as designed.

• Analyze exercise results to identify control weaknesses, telemetry gaps, missed detections, configuration issues, and response-process improvement opportunities.

• Create clear technical findings, risk statements, supporting evidence, and recommended remediation actions; track assigned issues through validation and closure.

• Partner with SIEM, SOC, threat intelligence, endpoint, network, cloud, vulnerability management, and security engineering teams to improve detection logic, response playbooks, tuning, and control effectiveness.

• Participate in purple team engagements and coordinate technical validation with red team, penetration testing, control assurance, and platform teams.

• Perform retesting after remediation to verify that control changes address the identified gap without creating unintended operational impact.

• Develop and maintain dashboards and metrics for scenario execution, control performance, detection coverage, remediation status, and recurring findings.

• Prepare technical reports, exercise readouts, implementation procedures, test plans, and supporting evidence for stakeholders, audit, regulatory, and control assurance requests.

• Automate repeatable BAS tasks through scripting, APIs, and platform integrations while maintaining version control and appropriate review and approval.

• Monitor adversary tactics, techniques, and procedures and emerging attack trends to recommend relevant updates to the BAS scenario library and testing priorities.

• Contribute to BAS procedures, playbooks, templates, standards, and continuous improvement initiatives to increase program repeatability, scalability, and maturity.

• Escalate unsafe conditions, unexpected system impact, or material control gaps promptly and support incident response activities when required.

        • Fulfill additional cybersecurity engineering, threat defense, control validation, and special project responsibilities as assigned.

• At least 5 years of cybersecurity experience, including relevant work in security engineering, offensive security, penetration testing, detection engineering, incident response, threat defense, or control validation.

• Bachelor's degree in computer science, cybersecurity, information technology, engineering, or a related discipline; equivalent practical experience may be considered.

       • Relevant certifications such as OSCP, GPEN, GCIH, GCIA, CRTO, CEH, CISSP, CCSP, or cloud-provider security certifications are preferred.
 

Salary Range: Salary will be Commensurate with Experience