Senior SAFE Lab Cybersecurity Engineer at Rochester Institute of Technology in RIT Main Location

Job description

Position Highlights The Senior SAFE Lab Cybersecurity Engineer leads offensive security assessments and adversary-emulation campaigns for corporate clients. They produce reports and provide briefings to clients. They are responsible for supervising teams of student employees and adjunct consultants. The Senior Cyber SAFE Engineer is the Cyber Range and Training Center's principal offensive security practitioner and the technical author of the adversary activity on which the Center's commercial, academic, and research programs depend. Realistic, instrumented, repeatable adversary emulation is the core product of the Center's fee-for-service training and assessment work. Key responsibilities include: leads client-facing security testing and evaluation in the SAFE Lab: penetration testing and ethical hacking of enterprise, government, military, and cyber-physical environments, and the translation of those findings into written reports and briefings that non-technical executives and technical practitioners can both act on. converts assessment findings and current threat intelligence into staged, observable attack campaigns that drive the Center's immersive exercises, competitions, and client engagements -- and ensures that those campaigns generate the telemetry participants must be able to find, in the tools and formats those participants actually use. The Senior SAFE Lab Cybersecurity Engineer serves as exercise control during live delivery, adapting scenario tempo and injects in real time while paying clients are in the room, and is accountable for the technical integrity of engagements that carry contractual delivery obligations. The position also leads teams of student employees and industry-expert adjunct consultants and is expected to document its work to a standard that allows another qualified engineer to reproduce any engagement independently. This position reports to the Director of the Cyber Range and Training Center within RIT's ESL Global Cybersecurity Institute and is expected to lead engagements independently with low-touch oversight. Preferred experience: A minimum of 5 years of professional experience in offensive security, including penetration testing, red teaming, or adversary emulation against production or production-representative environments. A minimum of 2 years of experience designing or executing adversary emulation, red team, purple team, or cyber exercise scenarios in which the activity was instrumented and observed by a defending audience. At least 3 years of client-facing consulting experience, including scoping, statement-of-work input, and level-of-effort estimation for fee-for-service engagements. Demonstrated experience leading engagements and directing the work of other technical contributors. Demonstrated experience delivering written assessment reports and verbal briefings directly to paying or sponsoring clients. Experience designing and deploying system/network environments using Openstack and infrastructure-as-code (ansible/terraform/etc). Experience designing or delivering cyber exercises, wargames, tabletop-to-technical hybrids, or competition infrastructure for external audiences. Detection engineering experience: authoring SIEM correlation content, EDR detections, or purple-team validation of detective controls. Experience with Splunk Enterprise Security, CrowdStrike, or comparable commercial detection stacks in a client-aligned configuration. Experience applying AI and large language model tooling to offensive security or exercise workflows — including agentic tooling and Model Context Protocol integrations — together with sound judgment regarding validation, data handling, and disclosure. Experience evaluating AI-enabled security products under realistic adversarial conditions and reporting evidence-based adoption guidance. Experience with cloud and identity attack paths in Azure/Entra ID, AWS, or Google Cloud. Experience with operational technology, ICS/SCADA, or energy-grid network