Principal Security Operation Engineer

Principal Security Operation Engineer responsible for developing and executing penetration testing, red-blue confrontation drills, and practical attack/defense exercises to identify security risks across enterprise networks, applications, and cloud environments. Leads or participates in red-blue exercises to assess defense capabilities, covers attack chains including extranet breakthrough, web vulnerability exploitation, phishing, privilege escalation, and lateral movement. Evaluates AI security for applications and model services, designs red team test cases, and contributes to automated tooling, security evaluation platforms, and reporting. Performs threat intelligence monitoring, risk assessment of external exposure surfaces, and improvements to detection rules, asset governance, and security baselines. Collaborates cross-functionally with blue team, infrastructure, R&D, and business units; produces detailed technical reports, attack paths, risk analysis, and remediation recommendations. Proficiency in common attack techniques, toolchains, operating systems, web frameworks, containers, and Kubernetes environments; strong documentation and problem-solving skills are required. Bonus points for cloud security and zero-trust, collaboration with AI-enabled security practices, and experience with automated red team platforms.