[Hiring] Senior Principal - Red Team Engineer @Hewlett Packard Enterprise

Role Description

This role provides advanced offensive cybersecurity expertise, focusing on the planning and execution of complex Red Team and Purple Team engagements. You will own the technical planning and delivery of these engagements — from scoping and test plans through execution, remediation verification, and formal reporting.

You will apply deep technical skills and offensive security experience to identify and exploit vulnerabilities in enterprise and cloud environments, helping to strengthen defenses through hands-on testing and analysis. This position involves driving high-impact testing projects, developing new testing methodologies and tools, and contributing to the organization’s overall security posture by uncovering and demonstrating real-world attack paths.

What you’ll do:

• Red Team Operations: Plan and execute full-scope adversary emulation campaigns, conduct multi-stage operations across enterprise environments, and apply disciplined operational tradecraft to achieve defined objectives.
• Purple Team Operations: Partner with detection and defensive teams to validate controls, test detection coverage, and translate offensive activity into measurable defensive improvements.
• Research and Tool Development: Continuously conduct offensive security research and custom tooling development to advance team tradecraft and operational capability.
• AI at Scale: Build and operate AI harnesses — orchestration layers and tooling around LLMs and agentic systems — that power cybersecurity operations, such as automating recon, tradecraft, zero-day hunting, and reporting in red team engagements to boost the speed and reach of operations.

Qualifications

• Hands-on experience in Red Team Operations or Red Team Development.
• Ability to take ownership of the technical planning and delivery of Red Team and Purple Team engagements — from scoping and test plans through execution, remediation verification, and formal reporting.
• Cloud exploitation: Familiarity with testing and exploiting workloads and configurations in AWS, Azure, and GCP (identity, networking, storage, serverless, IaC).
• Server & client platform familiarity: Strong experience with using and exploiting common server and client platforms (primarily Linux and Windows, with macOS experience being a plus).
• Programming & automation: Strong programming and tooling skills using Python, Go, Rust, or C/C++ (or equivalent) to automate testing, research new attack vectors, and develop internal Red Team tools.
• Infrastructure & evasion: Experience deploying offensive infrastructure for engagements and evading/demonstrating bypasses of network and host-based controls (WAF, IDS/IPS, EDR).
• Experience level & education: Master’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent experience. Minimum 9+ years in cybersecurity with substantial focus on offensive security.

Nice-to-have:

• Credited CVEs, participation in bug bounty programs, security blogging, publicly available quality code or tools.
• Documented history of meaningful technical research, responsible disclosure, tooling contributions, or industry-visible findings (e.g., novel vulnerabilities, exploit techniques, or defensive improvements).
• Proof of attendance of advanced courses which don’t have an associated certification.

Preferred Certifications/Experience:

• Certifications such as OSCP, OSCE, GPEN, GWAPT, CRTP, OSWE, or equivalents.
• Experience with CI/CD and developer pipelines security (GitHub/GitLab runners, build agents, IaC scanning).
• Familiarity with threat emulation frameworks and MITRE ATT&CK, OWASP TOP 10, OWASP ASVS, OWASP WSTG, STRIDE, and mappings for web/cloud scenarios.

Deliverables & Success Metrics:

• Key deliverables include high-fidelity technical reports with PoCs (where applicable), remediation verification summaries, and tooling contributions.
• Success will be measured by the quality and impact of findings, remediation impact, reduction in repeat issues, and improvements to detection/response coverage.

Benefits

• Health & Wellbeing: A comprehensive suite of benefits that supports physical, financial, and emotional wellbeing.
• Personal & Professional Development: Programs catered to helping you reach your career goals.
• Unconditional Inclusion: A commitment to inclusivity and flexibility in managing work and personal needs.