Security Engineer - Breach and Attack Simulation

P.I.V.O.T Security is at the forefront of proactive cybersecurity solutions, developing cutting-edge Breach and Attack Simulation technology. Our platform, STEP (Simulated Threat Engagement Platform), empowers organizations to continuously validate their security posture by simulating real-world adversarial tactics in safe, controlled environments.

About the role:

We're seeking a passionate BAS Security Engineer to join our growing team and help shape the future of our STEP platform. This is an exciting opportunity to work on a universal agent-based architecture built in Rust and contribute to expanding our simulation capabilities across the entire cyber kill chain.

You'll be working on innovative security automation, developing new attack modules and helping organizations proactively identify vulnerabilities before real attackers do. If you're excited about staying ahead of threat actors and building tools that make a real difference in cybersecurity, we want to hear from you.

What You'll Build:
• Design and develop advanced attack simulation modules across the cyber kill chain with evasion capabilities
• Develop endpoint security testing modules with EDR/XDR evasion and defense validation against endpoint controls
• Implement web application attack simulations (SQL injection, XSS, API vulnerabilities) with WAF evasion capabilities and security control validation
• Design cloud security validation modules (Azure, AWS, GCP) with evasive cloud-native attack patterns
• Create ransomware simulation modules with defense evasion and security control validation
• Implement MITRE ATT&CK technique simulations with evasion tactics and detection capability validation against SIEM, EDR and other security controls

Technical Skills:
• Proficiency in at least one programming/scripting language (Python, Bash, PowerShell, Rust, C/C++)
• Strong understanding of cybersecurity fundamentals and the MITRE ATT&CK framework
• Knowledge of common attack vectors: phishing, malware, ransomware, lateral movement, privilege escalation
• Understanding of evasion techniques for bypassing security controls (EDR, AV, firewalls, IDS/IPS, DLP)
• Familiarity with security tools such as EDR, firewalls, IDS/IPS, SIEM or vulnerability scanners
• Understanding of network protocols, system administration (Windows/Linux) and security architecture
• Experience with penetration testing, red teaming, purple teaming or security research is a plus

Mindset & Approach:
• Curiosity-driven and eager to learn emerging attack techniques
• Creative problem-solver who thinks like both an attacker and defender
• Strong automation mindset with attention to detail
• Ability to research, document, and implement security test cases
• Collaborative team player who thrives in a fast-paced environment
• Passion for staying current with the latest cybersecurity threats and trends

Key Responsibilities

Module Development:
• Research and curate effective attack scenarios based on real-world threat intelligence
• Design, develop and test new BAS modules that simulate various attack techniques
• Create automated workflows for continuous security validation
• Develop custom payloads and attack chains mapped to MITRE ATT&CK

Platform Enhancement:
• Contribute to the evolution of our universal agent architecture with advanced evasion capabilities
• Optimize simulation performance, accuracy and stealth to mimic real threat actors
• Ensure non-disruptive, safe execution of attack simulations in production environments
• Build reporting and analytics capabilities showing security control effectiveness and gaps
• Develop validation mechanisms to test detection capabilities of SIEM, EDR and other security tools after each simulation testcase

Collaboration & Research:
• Work closely with the development team to integrate new modules into STEP
• Stay updated on emerging threats, vulnerabilities and attack techniques
• Collaborate with customers to understand their security validation needs
• Contribute to documentation, best practices and knowledge sharing

Quality & Innovation:
• Test and validate simulation accuracy against real security controls
• Ensure modules cover diverse attack vectors across network, endpoint, application and cloud layers
• Propose innovative features and capabilities to enhance platform value
• Maintain code quality, security, and performance standards

Nice to have:
• Security certifications
• Experience with Rust or willingness to learn
• Contributions to open-source security tools or research
• Experience with commercial BAS platforms (SafeBreach, Cymulate, AttackIQ, Picus)
• Understanding of compliance frameworks (PCI-DSS, ISO 27001, NIST)

Why Join P.I.V.O.T Security?

At P.I.V.O.T Security, we believe that the best defense is knowing your weaknesses before attackers do. Our mission is to democratize advanced security testing and make continuous threat validation accessible to organizations of all sizes.

You'll be joining a team that values:
• Innovation - Building next-generation security solutions
• Impact - Helping organizations prevent real-world breaches
• Growth - Learning, experimenting, and evolving with the threat landscape
• Collaboration - Working together to solve complex security challenges

How to Apply

If you're excited about building automated attack simulations, thinking like an adversary, and contributing to a platform that strengthens cybersecurity defenses, we'd love to hear from you!

Apply now at [email protected] with your attached resumes.

P.I.V.O.T Security is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.