- Operate and continuously tune BloodHound Enterprise to map identity attack paths across on-prem AD, Entra/Azure, AWS, GCP, DevOps, and PAM platforms
- Analyze attack path data to identify choke points and Tier Zero exposures, prioritizing remediation by real-world exploitability and business impact
- Validate data collection accuracy and ensure attack path fidelity
- Extend attack path coverage into CI/CD pipelines, secrets management, IAM tooling, and other platforms with OpenHound
- Help design custom collectors to enrich BloodHound attack path data beyond out-of-the-box coverage
- Assist the Red Team in building realistic attack paths for covert operations and adversary emulation exercises
- Build relationships with Cloud Engineering, Cloud Security, IAM, Threat Detection, and Incident Response teams
- Communicate attack path exposure, remediation progress, and identity risk trends to cloud operations, internal customers, the SOC, IR, and business stakeholders
- Work in complex and critical environments that power the economy
- Collaborate with offensive, defensive, and threat hunting security experts to refine and expand skills

Requirements

- 3+ years of on-premises and cloud security/engineering experience with Active Directory and Entra/Azure, AWS, or GCP in enterprise environments
- Understanding of DevOps/CI-CD tooling (Jenkins, GitHub Actions, Terraform, CloudFormation, Ansible, or similar)
- Proficiency in BloodHound Ciphers and PowerShell, C#, or Python, with the ability to build or adapt tools and automation
- Familiarity with containerized environments (e.g., Kubernetes) and associated RBAC/security implications
- Solid understanding of network protocols, identity and access management, and common misconfigurations across AD, cloud, and DevOps environments
- Experience working in or supporting Red, Blue, and/or Purple Team operations in enterprise settings
- Working knowledge of Linux and Windows operating systems
- Familiarity with MITRE ATT&CK;, threat emulation frameworks (Caldera, Atomic Red Team),



and purple teaming methodologies
- Ability to reverse-engineer or emulate TTPs from threat intel reports
- Ability to analyze and identify complex cross-platform attack vectors
- Hands‑on experience with AD and/or cloud‑focused penetration testing, threat simulation, or detection/response in regulated or complex production environments
- PaaS/SaaS operational know‑how, including SLAs, load balancing, high availability, OS patching, networking, and security patch management
- Offensive/defensive security certifications or cloud security specialties are nice‑to‑have
- BloodHound Operator Certification (BHOC) is nice‑to‑have
- Above average performance; competitive and passionate; ability to set ambitious but achievable goals and surpass them
- Proven ability to build, grow, and maintain relationships both internally and externally

Core Competencies

Demonstrates expertise in cloud and on-premises security, particularly with Active Directory, Entra/Azure, AWS, and GCP. Proficient in analyzing attack paths, validating data accuracy, and collaborating with cross-functional teams to enhance security measures.

Highest-signal resume keywords

- BloodHound Enterprise Operation
- Active Directory Security
- Cloud Security Engineering
- DevOps/CI-CD Tooling
- Penetration Testing

ATS Optimization Keywords

Hard Skills

- BloodHound Ciphers
- PowerShell
- C#
- Python
- Network Protocols
- Identity and Access Management
- Container Security
- Threat Emulation Frameworks
- Cross‑Platform Attack Analysis
- PaaS/SaaS Operations

Soft Skills

- Relationship Building
- Communication
- Collaboration
- Goal Setting
- Problem Solving

Certifications & Qualifications

- BloodHound Operator Certification
- Offensive Security Certifications
- Cloud Security Specialties

Industry Keywords

- Red Team Operations
- Blue Team Operations
- Purple Team Methodologies
- MITRE ATT&CK;
- Threat Detection
- Incident Response
- Regulated Environments
- Complex Production Environments

Tools & Technologies

- Jenkins
- GitHub Actions
- Terraform
- CloudFormation
- Ansible
- Kubernetes
- Linux
- Windows

📌 Senior Security Specialist – Attack Path Management (Toronto)
🏢 Jobtailor
📍 Toronto