- Operate and continuously tune BloodHound Enterprise to map identity attack paths across on-prem AD, Entra/Azure, AWS, GCP, DevOps, and PAM platforms- Analyze attack path data to identify choke points and Tier Zero exposures, prioritizing remediation by real-world exploitability and business impact- Validate data collection accuracy and ensure attack path fidelity- Extend attack path coverage into CI/CD pipelines, secrets management, IAM tooling, and other platforms with OpenHound- Help design custom collectors to enrich BloodHound attack path data beyond out-of-the-box coverage- Assist the Red Team in building realistic attack paths for covert operations and adversary emulation exercises- Build relationships with Cloud Engineering, Cloud Security, IAM, Threat Detection, and Incident Response teams- Communicate attack path exposure, remediation progress, and identity risk trends to cloud operations, internal customers, the SOC, IR, and business stakeholders- Work in complex and critical environments that power the economy- Collaborate with offensive, defensive, and threat hunting security experts to refine and expand skillsRequirements3+ years of on-premises and cloud security/engineering experience with Active Directory and Entra/Azure, AWS, or GCP in enterprise environmentsUnderstanding of DevOps/CI-CD tooling (Jenkins, GitHub Actions, Terraform, CloudFormation, Ansible, or similar)Proficiency in BloodHound Ciphers and PowerShell, C#, or Python, with the ability to build or adapt tools and automationFamiliarity with containerized environments (e.G., Kubernetes) and associated RBAC/security implicationsSolid understanding of network protocols, identity and access management, and common misconfigurations across AD, cloud, and DevOps environmentsExperience working in or supporting Red, Blue, and/or Purple Team operations in enterprise settingsWorking knowledge of Linux and Windows operating systemsFamiliarity with MITRE ATT&CK;,



threat emulation frameworks (Caldera, Atomic Red Team), and purple teaming methodologiesAbility to reverse-engineer or emulate TTPs from threat intel reportsAbility to analyze and identify complex cross-platform attack vectorsHands‑on experience with AD and/or cloud‑focused penetration testing, threat simulation, or detection/response in regulated or complex production environmentsPaaS/SaaS operational know‑how, including SLAs, load balancing, high availability, OS patching, networking, and security patch managementOffensive/defensive security certifications or cloud security specialties are nice‑to‑haveBloodHound Operator Certification (BHOC) is nice‑to‑haveAbove average performance; competitive and passionate; ability to set ambitious but achievable goals and surpass themProven ability to build, grow, and maintain relationships both internally and externallyCore CompetenciesDemonstrates expertise in cloud and on-premises security, particularly with Active Directory, Entra/Azure, AWS, and GCP. Proficient in analyzing attack paths, validating data accuracy, and collaborating with cross-functional teams to enhance security measures.Highest-signal resume keywordsBloodHound Enterprise OperationActive Directory SecurityCloud Security EngineeringDevOps/CI-CD ToolingPenetration TestingATS Optimization KeywordsHard SkillsBloodHound CiphersPowerShellC#PythonNetwork ProtocolsIdentity and Access ManagementContainer SecurityThreat Emulation FrameworksCross‑Platform Attack AnalysisPaaS/SaaS OperationsSoft SkillsRelationship BuildingCommunicationCollaborationGoal SettingProblem SolvingCertifications & QualificationsBloodHound Operator CertificationOffensive Security CertificationsCloud Security SpecialtiesIndustry KeywordsRed Team OperationsBlue Team OperationsPurple Team MethodologiesMITRE ATT&CKThreat; DetectionIncident ResponseRegulated EnvironmentsComplex Production EnvironmentsTools & TechnologiesJenkinsGitHub ActionsTerraformCloudFormationAnsibleKubernetesLinuxWindows#J-18808-Ljbffr

📌 Bloodhound Security Specialist Role - $33.3 - $46.5 An Hour (Winnipeg)
🏢 BloodHound Security
📍 Winnipeg