Engineer III - Red Team

• Plan and execute complex covert Red Team operations from initial compromise to achieving defined high-value objectives maintaining operational security throughout.
• Develop customize and deploy advanced offensive tooling exploits and implants to bypass security controls and maintain persistence within target environments.
• Conduct vulnerability research cyber security assessments and social engineering campaigns as part of Red Team engagement.
• Collaborate closely with Cyber Threat Intelligence to incorporate real-world adversary TTPs and create intelligence-driven attack scenarios.
• Produce high-quality executive-level reports detailing simulation findings observed defensive gaps and prioritized actionable remediation recommendations.
• Facilitate detailed Purple Team exercises by working directly with Incident Response analysts to share offensive techniques and validate detection and response capabilities in real-time.
• Present findings and strategic recommendations to technical and executive stakeholders.
• Stay current with emerging offensive technologies adversary TTPs and defensive countermeasures.

• Bachelor's degree in Cybersecurity Computer Science Information Systems or equivalent work experience
• 6+ years of progressive experience in cybersecurity with at least 4 years dedicated to Red Team operations advanced penetration testing or offensive security research.
• Advanced knowledge and hands-on experience in full lifecycle of Red Team engagement and advanced penetration testing methodologies.
• Expertise with common red team toolsets (e.g. Cobalt Strike Nighthawk C2 Metasploit Evilginx) and custom implant scripting and development.
• Strong understanding of network protocols operating system internals (Windows Linux MacOS) cloud security and defensive security technologies.
• Familiarity with intelligence frameworks such as MITRE ATT&CK for mapping and emulating adversary behavior.
• Proven ability to bypass advanced security defenses and demonstrate impact on critical business assets.
• Hands-on experience with at least one scripting or programming language for tooling and automation (e.g. Python Go Powershell).
• Demonstrated success in executing large-scale enterprise-level Red Team simulations.
• Strong written and verbal communication skills with the ability to articulate complex technical vulnerabilities and operational findings to a non-technical audience.

• Offensive Security Certified Professional (OSCP) or Offensive Security Wireless Professional (OSWP)
• GIAC Penetration Tester (GPEN) GIAC Web Application Penetration Tester (GWAPT) or GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)

What We Do

Cencora is a leading pharmaceutical solutions organization centered on improving the lives of people and animals everywhere. With 46000+ global team members we have the opportunity to make a positive impact on healthcare in communities everywhere. Our team members are empowered to activate their careers through a collective of tools and resources designed to support individual career interests and aspirations. We value our listening culture that actions real outcomes and our team members appreciate and recognize one another for contributions that are making a meaningful global impact. No matter what your role is here the work we do together has meaning. When you join our team you become a crucial part of a greater purpose. We’re committed to supporting you personally and professionally so we can achieve more together at the center of health.Protect yourself from job scams: Recruitment scams are on the rise. To protect yourself we urge you to be vigilant and follow these guidelines > https://careers.cencora.com/us/en/job-scams

Gallery