Breach & Attack Simulation (BAS) Engineer – AttackIQ | MITRE ATT&CK

We are looking for an experienced Breach & Attack Simulation (BAS) Engineer with hands-on expertise in AttackIQ to evaluate and validate the effectiveness of security controls. The ideal candidate will be responsible for simulating real-world cyberattacks, assessing detection and response capabilities, and strengthening the organizations overall security posture.

Key Responsibilities:

• Deploy, configure, and manage the AttackIQ BAS platform.
• Design and execute attack simulation scenarios aligned with the MITRE ATT&CK framework.
• Validate the effectiveness of security controls such as:
• EDR / XDR
• SIEM
• Firewalls
• Email security solutions
• Identify detection gaps and provide remediation recommendations.
• Generate executive and technical reports with risk-based insights.
• Collaborate with SOC, Incident Response, and Blue Team members.
• Conduct control validation after new security tool implementations.
• Assist in purple team exercises and threat emulation activities.
• Maintain attack simulation libraries and custom scenarios.

Required Skills & Qualifications:

• Bachelors degree in Cybersecurity, IT, or related field.
• 46+ years of experience in cybersecurity operations.
• Hands-on experience with AttackIQ or other BAS platforms.
• Strong understanding of:
• Threat emulation and adversary simulation
• MITRE ATT&CK techniques and tactics
• SIEM and SOC workflows
• Endpoint and network security controls
• Experience in scripting (Python, PowerShell) is an advantage.
• Strong analytical and reporting skills.

Preferred Certifications:

• CEH / GCIH / GCIA
• CISSP (advantage)
• AttackIQ Certification (if available)

Soft Skills:

• Strong communication and presentation skills.
• Ability to translate technical findings into business risk language.
• Proactive and detail-oriented.
• Experience working in enterprise or regulated environments is preferred.