Red Team Security Engineer at Motive

Job description

Who we are: Motive empowers the people who run physical operations with tools to make their work safer, more productive, and more profitable. For the first time ever, safety, operations and finance teams can manage their drivers, vehicles, equipment, and fleet related spend in a single system. Combined with industry leading AI, the Motive platform gives you complete visibility and control, and significantly reduces manual workloads by automating and simplifying tasks. Motive serves nearly 100,000 customers – from Fortune 500 enterprises to small businesses – across a wide range of industries, including transportation and logistics, construction, energy, field service, manufacturing, agriculture, food and beverage, retail, and the public sector. Visit gomotive.com to learn more. About the Role: As a Red Team Security Engineer you will be a key member of the Product Security Team. You will be the primary Security partner for software and engineering teams focusing on evaluating security posture across the organization. The Red Team Engineer will be responsible for conducting adversary emulation and offensive security assessments across cloud environments while driving remediation efforts of issues. What You'll Do: Plan and execute red team operations, adversary simulations, and targeted security assessments focused on cloud environments. Evaluate the security of cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services. Identify and validate attack paths involving IAM misconfigurations, overprivileged roles, secrets exposure, metadata abuse, insecure automation, and weaknesses in cloud service configurations. Assess detection and response coverage by exercising logging, alerting, monitoring, and incident response processes in partnership with blue team and detection engineering functions. Track emerging attacker techniques, cloud exploitation trends, and new abuse paths relevant to modern enterprise environments. What We're Looking For: 5+ years of experience in offensive security, red teaming, penetration testing, and detection validation Familiarity with attacker tactics, techniques, and procedures, and the ability to map findings to frameworks such as MITRE ATT&CK. Ability to write concise, actionable reports and communicate complex technical issues to diverse stakeholders Relevant industry certifications such as OSCP, OSEP, GXPN, GPEN, or cloud security certifications. Pay Transparency Your compensation may be based on several factors, including education, work experience, and certifications. For certain roles, total compensation may include restricted stock units. Motive offers benefits including health, pharmacy, optical and dental care benefits, paid time off, sick time off, short term and long term disability coverage, life insurance as well as 401k contribution (all benefits are subject to eligibility requirements). Learn more about our benefits by visiting Motive Perks & Benefits The base compensation range for this role is: $140,000 — $190,000 USD Creating a diverse and inclusive workplace is one of Motive's core values. We are an equal opportunity employer and welcome people of different backgrounds, experiences, abilities and perspectives. Please review our Candidate Privacy Notice here . UK Candidate Privacy Notice here . The applicant must be authorized to receive and access those commodities and technologies controlled under U.S. Export Administration Regulations. It is Motive's policy to require that employees be authorized to receive access to Motive products and technology. Regarding US-based roles, depending on your role and primary work location, Motive Technologies, Inc. (“Employer”) discloses candidates may be required to execute a non-compete covenant with the Employer. This requirement does not apply to lawyers, interns, or employees working in CA, MN, MT, ND, OK, or where otherwise prohibited by law. Non-compete covenant terms in all other jurisdictions will be subject to the applicable statutory requirements, including but not limited to, procedures, industry related prohibitions, or salary and compensation thresholds. All job postings are for existing vacancies. Please note; some interviews or new-hire training sessions may be held in person at one of our global offices.

Requirements

Must-haves

Plan and execute red team operations, adversary simulations, and targeted security assessments focused on cloud environments.
Evaluate the security of cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services.
Identify and validate attack paths involving IAM misconfigurations, overprivileged roles, secrets exposure, metadata abuse, insecure automation, and weaknesses in cloud service configurations.
Assess detection and response coverage by exercising logging, alerting, monitoring, and incident response processes in partnership with blue team and detection engineering functions.
Track emerging attacker techniques, cloud exploitation trends, and new abuse paths relevant to modern enterprise environments.
5+ years of experience in offensive security, red teaming, penetration testing, and detection validation
Familiarity with attacker tactics, techniques, and procedures, and the ability to map findings to frameworks such as MITRE ATT&CK.
Ability to write concise, actionable reports and communicate complex technical issues to diverse stakeholders
Relevant industry certifications such as OSCP, OSEP, GXPN, GPEN, or cloud security certifications.
Please review our Candidate Privacy Notice here .
UK Candidate Privacy Notice here .
All job postings are for existing vacancies. Please note; some interviews or new-hire training sessions may be held in person at one of our global offices.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aici/cd

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

401k

Paid Time Off