Job Description and Requirements
Randolph-Brooks Federal Credit Union is currently searching for an experienced and talented Offensive Security Engineer III to join our amazing IT Security team!
The Offensive Security Engineer III will have the ability to work a hybrid schedule (remote/onsite) after a period of training (time frame may vary). Training will take place at the RBFCU Administrative Service Center: 1 Ikea-RBFCU Pkwy, Live Oak, Texas 78233.
All applicants must reside within the state of Texas and have the capability of performing all of the work from their home in Texas.
To successfully work from home, employees must have access to a minimum internet connection as noted by RBFCU.
Must have a reliable home internet provider and the ability to hard wire a connection directly to modem (Ethernet cable provided).
Must be able to provide a workspace at home that is safe, suitable for work, and within a distraction free environment
The Offensive Security Engineer III leads complex, intelligence-informed adversary emulations that test how well the organization’s people, processes, architecture, and technology withstand realistic multi-stage attacks. The role designs and executes campaigns across identity, endpoints, networks, applications, APIs, cloud platforms, data environments, software delivery systems, and other authorized surfaces, including controlled human-factor and physical scenarios when explicitly approved. The engineer evaluates attack-path viability and the effectiveness of preventive, detective, responsive, and recovery controls, then translates demonstrated compromise paths into systemic improvements across security and engineering.
This role provides technical and engagement leadership, develops custom offensive tooling and infrastructure, manages operational risk, and coordinates closely with threat intelligence, SOC, incident response, security engineering, legal, privacy, physical security, and business stakeholders. The Senior Red Team Engineer raises the maturity of both offense and defense through purple-team collaboration, detection validation, rigorous reporting, mentorship, and repeatable assessment methods.
Essential Functions and Responsibilities:
Lead complex, multi-domain adversary-emulation campaigns targeting critical services, high-value assets, privileged identities, cloud control planes, applications, data, and software delivery systems.
Translate threat intelligence and business context into campaign objectives, adversary profiles, attack hypotheses, target selections, techniques, success criteria, and measurable defensive outcomes.
Design engagement plans, rules of engagement, safety controls, communications, deconfliction, escalation paths, data-handling requirements, and technical workstreams.
Execute and supervise advanced attack activity involving stealth, persistence, identity compromise, lateral movement, cloud privilege escalation, application exploitation, data access, and objective demonstration.
Lead controlled social-engineering, physical, wireless, third-party, or assumed-breach scenarios when explicitly approved by the required business, legal, privacy, human resources, physical security, and risk authorities.
Develop custom tooling, implants, payloads, test harnesses, automation, redirectors, infrastructure, and operational-security practices appropriate to authorized objectives.
Evaluate defense-in-depth performance across prevention, identity, segmentation, telemetry, detection, investigation, containment, eradication, recovery, and resilience.
Lead purple-team exercises and convert engagement observations into high-value detections, hunts, playbooks, architecture improvements, control validation, and remediation priorities.
Produce executive and technical narratives that connect attack paths and defensive gaps to business risk, systemic causes, and prioritized corrective actions.
Mentor offensive and defensive engineers, conduct technical reviews, and lead…