Job Description

Offensive Security Engineer - Red / Purple Team

n

n
Brisbane or Sydney Based role
n
12-month Contract
n
WFH – 3days in office and 2 days WFH
n

n

As an Offensive Security Engineer, you will Validates whether client controls, detection and logging actually catch real attacks and identifies and supports closing the gaps. The role scopes, plans, manages and undertakes cyber hunt, penetration testing, red team, threat emulation and other technical security assurance activities across networks, applications, cloud services, end-user environments and enterprise platforms.

n

Responsibilities

n

n
Runs red and purple team engagements against critical apps, infrastructure and controls
n
Builds and maintains fit-for-purpose red team infrastructure
n
Validates controls, detection and logging; finds gaps and proves they are closed
n
Owns and matures Breach & Attack Simulation
n
Demonstrated experience planning, scoping and conducting penetration testing, cyber hunt, red team, threat emulation or similar technical security assurance activities across enterprise technology settings;
n




Solid technical knowledge of common vulnerability classes, exploitation methods, operating systems, networks, web applications, cloud services, security controls and the tools and methodologies used to assess them
n
Closes the loop: proposes remediation, recent detections, log sources and controls; drives findings into the engineering backlog
n
Acts as the validation arm of threat-informed defence (ATT&CK-mapped;)
n

n

Must-have

n

n
Hands-on offence: adversary emulation, C2, exploitation, attack-path analysis across cloud / infra / endpoint
n
Detection and logging fluency (the purple half)
n
BAS and ATT&CK;
n
Python and automation; tight rules-of-engagement discipline
n

n

Bonus

n

n
AI coding / agentic tools (GPT-5.5 Trusted Access for Cyber, Codex, Claude Code, Copilot or similar) to find and prove exploitable vulns at repo scale
n
GitLab Ultimate; standing up AI-assisted code-analysis infrastructure
n
Detection engineering
n
Application / code security experience (SAST, DAST, SCA)
n

📌 Offensive Security Engineer Red / Purple Team Queensland
🏢 Bluefin Resources
📍 Queensland