Senior Red Team Engineer

Position Overview

Adobe is seeking a highly skilled and motivated Senior Red Team Engineer to join our Product and Software Security team. This role is crucial for testing the security resiliency of Adobe's capabilities by identifying and exploiting weaknesses, testing control effectiveness, and providing actionable intelligence to enhance adversary-resilient capabilities. If you are passionate about cybersecurity and making a difference, we want to hear from you.

Employment Type

Full-time

Location Type

Not specified

Salary

The U.S. pay range for this position is $140,100 -- $245,700 annually. Pay within this range varies by work location and may also depend on job-related knowledge, skills, and experience. Your recruiter can share more about the specific salary range for the job location during the hiring process.

• For sales roles, starting salaries are expressed as total target compensation (TTC = base + commission).
• For non-sales roles, starting salaries are expressed as base salary.
• Short-term incentives are in the form of sales commission plans (for sales roles) or the Annual Incentive Plan (AIP) (for non-sales roles).
• Certain roles may be eligible for long-term incentives.

Responsibilities

• Research, design, and build red team operations.
• Build and maintain Red Team infrastructure.
• Conduct adversary simulations and evasive routines to stress test controls.
• Map attack surface and prioritize exploitable opportunities.
• Confidently use test tools and exploits to conduct operations.
• Develop tools and exploits to conduct operations.
• Apply chaining of exploits to explore all phases of the kill chain.
• Find and pressure test controls from different adversary vantage points.
• Lead the development of an arsenal of exploits for continuous automated exploit testing to reduce manual toil and repetition.
• Stay up-to-date on the latest adversary trends, exploits, and threats.
• Invite and mentor other team members to work on operations.
• Analyze results and create presentations for CSO staff.
• Collaborate with the Blue Team to improve detection and response capabilities.
• Collaborate with Adobe teams and guide security features in Adobe capabilities.
• Publish blog articles and present talks at conferences.

Requirements

• 5+ years of experience working in a Red Team.
• Unending appetite for learning.
• Passion to win and be #1.
• Excellent reconnaissance skills that surpass peers.
• Confidence to create and deliver successful operations.
• Demonstrable proficiency in using remote code exploits, code injection, and security misconfigurations to gain access.
• Proficiency in using Post-exploitation modules to reach Red Team objectives.
• Ability to achieve lateral movement post-exploit phase.
• Well-formed opinions supported by facts.
• Excellent communication and written skills.

Desired Skills (A Plus)

• OSCP and/or OSCE certification.
• Cloud and Kubernetes expertise.
• Ability or desire to build your own tools or exploits.
• Submitted CVEs on the National Vulnerability Database (NVD).

About Our Company

Changing the world through digital experiences is what Adobe’s all about. We give everyone—from emerging artists to global brands—everything they need to design and deliver exceptional digital experiences! We’re passionate about empowering people to create beautiful and powerful images, videos, and apps, and transform how companies interact with customers across every screen. We’re on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere in the organization, and we know the next big idea could be yours!