Adversary Simulation Member

Evernorth exists to elevate health for all, because we believe health is the starting point for human potential and progress.

As an Adversary Simulation member, you will possess a deep understanding of information security and computer science, paired with experience executing highly technical offensive assessments.

Job Description & Responsibilities:

• Design, scope, and lead complex technical assessments, including Purple Team engagements and other security initiatives to test attack detection and prevention effectiveness
• Perform targeted offensive security assessments with a focus on detection and telemetry improvement
• Collaborate with cross-functional teams including Incident Response, Threat Hunt, Threat Intelligence, and Security Engineering to drive improved security outcomes and resiliency
• Identify, develop, and promote new capabilities and improve Adversary Simulation's overall program maturity
• Support and mentor internal teams on secure architecture, detection logic, and adversary behaviors

Experience Required:

• 13 - 15 years of combined experience in offensive security, red team, blue team, or purple team roles
• Demonstrated hands-on experience executing advanced adversary TTPs across all phases of the kill chain
• Proven ability to build, run, and measure adversary emulation exercises based on MITRE ATT&CK or custom threat models
• Proficiency in scripting languages (Python, PowerShell, Bash) and familiarity with programming languages (C/C++, C#)
• Experience building or tuning detection logic (KQL, Sigma, SPL, YARA, etc.) from detection engineering, threat hunt, or threat intelligence roles
• Deep understanding of cybersecurity principles, network security, and modern attack vectors
• Demonstrated ability to produce comprehensive reports and explain complex technical details in a concise, understandable manner
• Excellent communication and time management skills

Experience Desired:

• Prior experience performing offensive security operations within a mature enterprise or regulated environment
• Knowledge of malware development concepts, evasion techniques, and offensive security research
• Experience working within Agile or hybrid Agile/Scrum environments, including participating in sprint planning, backlog refinement, retrospectives, and cross-team coordination

Education and Training Required:

• Bachelor's degree in Computer Science, Information Security, or a related field. Equivalent experience may be considered
• Relevant certifications such as OSCP, OSCE, OSEP, GXPN, CRTO, or similar