Red Team Security Engineer

About the role

Outsourcing Services International is hiring a Red Team Security Engineer in Antiguo Cuscatlán, El Salvador, on a full-time basis. The role combines offensive security with automation and security operations: running adversary simulations, building automated workflows across SIEM, SOAR and security tooling, and taking part in alert investigation, incident response, threat hunting and detection engineering.

Key responsibilities

• Plan and execute authorized Red Team engagements, including reconnaissance, exploitation, privilege escalation, lateral movement and persistence, within approved rules of engagement
• Assess security controls across endpoints, identity, networks, applications, cloud and security infrastructure, and use the MITRE ATT&CK framework
• Develop offensive tools, scripts and payloads, and partner with Blue Team on purple-team exercises
• Document attack paths, evidence and remediation recommendations, then validate improvements
• Automate security workflows: SIEM and SOAR, API integrations, enrichment, alert triage, evidence collection and case management, using Python, PowerShell, REST APIs, JSON and Git
• Translate Red Team activity into detections, tune alerts, run threat hunting and support incident response and alert investigation

Required profile

• Demonstrated hands-on Red Team, penetration testing or offensive security experience
• Experience with Windows and Active Directory, and testing network, endpoint, identity, application and/or cloud controls
• Scripting experience, preferably Python and/or PowerShell, and REST API integration
• Experience with SOAR platforms, Git and security operations
• Preferred: offensive and blue-team experience, cloud security in AWS and Azure, Microsoft Entra ID, M365, detection engineering and relevant certifications (e.g. OSCP, OSEP, CRTO)