Red Team Engineer

Who we are looking for As a member of the Red Team within the Global Cyber Security group, the Red Team Engineer will serve as a core technical contributor for adversary-emulation, threat-informed security testing, and controlled offensive security operations. The engineer will execute activities in accordance with State Street's standards and procedures, risk-acceptance requirements, and regulatory expectations, ensuring all work is conducted within approved environments, scopes, and authorization pathways. The role also requires disciplined documentation practices so that assessment decisions, activities, evidence, findings, and outcomes are clear, traceable, and audit-ready.  The Red Team Engineer will conduct comprehensive, intelligence‑driven assessments of enterprise applications, critical infrastructure components, and associated operational and technical security controls. These assessments evaluate not only the security posture of targeted systems but also the effectiveness of the organization’s detection, prevention, response, and governance capabilities.  The Red Team Engineer will collaborate with technical experts across applications, platforms, and infrastructure, security leadership, and process stakeholders, threat intelligence and defensive analytics teams, security operations personnel, and business system owners to ensure testing scenarios reflect realistic adversary behaviors and enterprise risks. The role requires strong technical expertise and broad knowledge of core security control domains, including identity and access management, data protection, secure software development, cloud and infrastructure security, endpoint and detection technologies, network security, and enterprise vulnerability and threat management. Familiarity with security monitoring, detection engineering, and incident response processes further supports the evaluation of organizational defenses.    Why this role is important to us The Red Team Engineer will collaborate with technical experts across applications, platforms, and infrastructure, security leadership, and process stakeholders, threat intelligence and defensive analytics teams, security operations personnel, and business system owners to ensure testing scenarios reflect realistic adversary behaviors and enterprise risks. The role requires strong technical expertise and broad knowledge of core security control domains, including identity and access management, data protection, secure software development, cloud and infrastructure security, endpoint and detection technologies, network security, and enterprise vulnerability and threat management. Familiarity with security monitoring, detection engineering, and incident response processes further supports the evaluation of organizational defenses. What you will be responsible for Execute authorized adversary‑emulation activities to assess defenses, security controls, and organizational resilience.  Perform targeted security assessments across applications, infrastructure, cloud platforms, and enterprise technologies.  Collaborate with cybersecurity, technology, and risk stakeholders to develop realistic, threat‑informed testing scenarios.  Evaluate detection and response capabilities and support improvement through coordinated purple‑team activities.  Operate within defined approval processes, scopes, authorization boundaries, and safe‑testing protocols.  Develop or adapt tools and techniques to support realistic testing, ensuring secure and compliant usage.  Produce clear, accurate, and audit-ready assessment documentation and reporting, and support remediation to reduce identified risks and strengthen defenses.  Create and maintain assessment documentation, including approved scope and authorization records, test plans, procedures, evidence, findings, and final reports, as applicable to the engagement.  Organize and retain assessment records in approved repositories so that key decisions,