Staff Security Engineer - Zero Labs

<h2>About Team</h2> <p class="p1"><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">Rubrik Zero Labs is on a mission to deliver actionable, vendor-agnostic insights to reduce data security risks. We assess real-world cyber threats to advance cyber resilience best practices for global organizations</span>. <span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">Click the following link to know more about Zero labs - <a href="https://zerolabs.rubrik.com/">https://zerolabs.rubrik.com/</a></span></p> <h2><strong>About the Role</strong></h2> <p>Rubrik Zero Labs is building a platform that allows enterprises to run safe, high-fidelity cyber-attack simulations to prove their recovery readiness. We are seeking a Staff Security Engineer to lead our <strong>Adversary Emulation Program</strong>. You will be responsible for researching the global threat landscape and translating complex adversary behaviors into automated, safe, and measurable attack playbooks that span Cloud, On-Prem, and SaaS environments.</p> <h2><strong>What you'll Do</strong></h2> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"> <ul> <li><strong>Adversary Research:</strong> Analyze real-world ransomware, wiper-ware, and insider threat TTPs (Tactics, Techniques, and Procedures) across diverse workloads (VMware, SQL, Azure, AWS, M365).</li> <li><strong>Playbook Development:</strong> Design and author automated attack logic using Ansible, Python, and YAML.</li> <li><strong>Scenario Engineering:</strong> Create "Scenario Manifests" that define the blast radius, risk level, and success criteria for simulations.</li> <li><strong>Safety Guardrails:</strong> Develop rigorous "Circuit Breaker" logic to ensure simulations remain strictly within isolated recovery environments (IREs) and never impact production data.</li> </ul> <strong> Resilience Mapping:</strong> Map RZL simulations to the MITRE ATTCK framework and Rubrik-specific recovery checkpoints.</li> </ul> <h2><strong>Experience you'll need</strong></h2> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"> <ul> <li><strong>Offensive Security:</strong> 12+ years in Red Teaming, Threat Emulation, or Malware Analysis.</li> <li><strong>Automation Mastery:</strong> Expert-level proficiency in Ansible and Python for infrastructure-as-code and attack orchestration.</li> <li><strong>Multi-Domain Knowledge:</strong> Deep understanding of OS internals (Windows/Linux), Database structures, and Cloud Identity providers.</li> <li><strong>Safety Mindset:</strong> Proven experience building offensive tools that operate in "production-adjacent" environments with strict safety requirements.</li> </ul> <strong>Certifications (Preferred):</strong> OSCP, OSCE, or equivalent practical experience.</li> </ul> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">Security certifications like <strong>GCIH, GCFA, OSCP, or AWS Security</strong> are a plus.</span></p><div class="content-conclusion"><h2>Join Us in Securing the World's Data</h2> <p>Rubrik (RBRK), the Security and AI Operations Company, leads at the intersection of data protection, cyber resilience, and enterprise AI acceleration. Rubrik Security Cloud delivers complete cyber resilience by securing, monitoring, and recovering data, identities, and workloads across clouds. Rubrik Agent Cloud accelerates trusted AI agent deployments at scale by monitoring and auditing agentic actions, enforcing real-time guardrails, fine-tuning for accuracy and undoing agentic mistakes. </p> <p><a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/">Linkedin</a> | <a href="https://twitter.com/rubrikinc">X (formerly Twitter)</a> | <a href="https://www.instagram.com/rubrikinc/" target="_blank">Instagram</a> | <a href="https://www.rubrik.com">Rubrik.com</a></p> <h2>Inclusion @ Rubrik</h2> <p>At Rubrik, we are dedicated to fostering a culture where people from all back ... (truncated, view full listing at source)