Conduct physical, external/internal, and wireless network assessments, as well as web and mobile application testing.
Lead security assessments across cloud platforms (Google Cloud, Microsoft Azure, AWS) and embedded systems.
Develop and test threat actor emulation tools, tactics, and procedures for the Red Team to employ on-demand in assessments of application, system, cloud, and network security controls.
Employ these tools and techniques in the KeyBank environment with minimal supervision while also mentoring the team in their safe and responsible usage.
Partner with the Cyber Threat Intelligence team to ensure Red Team capabilities and tactics accurately reflect the current threat landscape and real-world-TTPs are translated into emulation plans.
Lead cross-functional teams during project testing phases and architectural design reviews to ensure appropriate security controls are in place to mitigate threats.
Coordinate and monitor third-party penetration testing engagements, ensuring alignment with requirements, effective communication, and timely, accurate reporting.
Create Red Team metrics and reporting to track program effectiveness and stakeholder visibility.
Lead efforts to track remediation of findings to completion through coordination with application and technology system owners.
Expand the team’s capabilities through
Creation of custom tools and automation frameworks.
Research and development of novel offensive techniques and tradecraft.
Incorporation of threat actor intelligence into emulation scenarios.
Delivery of internal presentations and knowledge-sharing sessions.
Evaluate the effectiveness of detection and response capabilities across SOC, EDR/XDR, SIEM, and other security layers.
Provide detailed post-mortem reports and executive briefings with prioritized recommendations.
Mentor junior team members and contribute to the development of adversarial tradecraft within the team.
Build a relationship with blue teams to conduct purple team exercises and improve detection engineering.
Contribute to the continuous improvement of adversarial emulation methodologies, tooling, and documentation.
Required Qualifications
Master’s in computer science, Cybersecurity, or related field—or equivalent experience.
8+ years of experience in Red Team or Penetration Testing roles.
Proficiency with Red Team tools and Command & Control (C2) frameworks.
Strong scripting and programming skills in PowerShell, Python, JavaScript, Bash, Golang or similar languages.
Deep understanding of Windows, Linux, Kali Linux, and macOS operating systems.
Direct experience with one or more of the following
Google Cloud, Microsoft Azure, and AWS platforms.
Advanced networking knowledge and experience with attack simulation.
Deep understanding of the MITRE ATT&CK framework and adversary TTPs.
Deep understanding of one or more Penetration Testing Methodologies such as PTES, ISECOM, ISSAF, and OSSTMM
Strong research and reporting skills.
Willingness to travel for on-site assessments.
Preferred Certifications
Offensive Security Certified Professional (OSCP)
Offensive Security Certified Expert (OSCE)
Offensive Security Experienced Penetration Tester (OSEP)
Certified Red Team Professional (CRTP)
GIAC Penetration Tester (GPEN)
GIAC Web Application Penetration Tester (GWAPT)
CREST Registered Penetration Tester / CBEST Qualifications
COMPENSATION AND BENEFITS
This position is eligible to earn a base salary in the range of $96,000.00 - $181,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.
Please click here for a list of benefits for which this position is eligible.
Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.
Job Posting Expiration Date: 12/04/2026

KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.
Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing HR_Compliance@keybank.com.
#LI-Remote
