PlexTrac

Security Engineer

• Plan and execute red team engagements across our cloud infrastructure (AWS/GCP/Azure)
• Simulate realistic attack chains using current threat actor techniques
• Conduct assumed breach scenarios, purple team exercises, and objective-based engagements
• Assess cloud-specific attack surfaces: IAM roles, storage misconfigurations, serverless functions, container workloads, and CI/CD pipelines
• Test Active Directory and hybrid identity environments for attack paths
• Perform web and API application testing
• Build, customize, and maintain offensive tools, scripts, and C2 infrastructure
• Develop and manage red team infrastructure
• Create and maintain repeatable testing methodologies and internal playbooks
• Evaluate and improve detection coverage by working with our blue team
• Write detailed reports that document attack paths and remediation steps
• Present findings to both technical teams and non-technical stakeholders
• Track remediation progress and validate fixes
• Help define the scope, methodology, and maturity of our red team program
• Contribute to internal security standards and secure design reviews
• Mentor junior team members

Offensive Security Engineer – Red Team