Senior Red Team Specialist

Senior Red Team Specialist

We’re looking for a Senior Red Team Cybersecurity Specialist to join our offensive security operations. In this high‑impact role, you'll proactively identify weaknesses before attackers do, simulating advanced persistent threats (APTs) to rigorously test our systems, people, and infrastructure. This is a key position for a hands‑on expert who thrives on ethical hacking and wants to build a best‑in‑class offensive security function.

• Execute realistic engagements: design and lead red team engagements that simulate real‑world threat actors.
• Conduct full‑scope testing: perform comprehensive internal and external penetration tests across web, mobile, and network infrastructure.
• Exploit and elevate privileges: identify vulnerabilities, develop custom exploits, and elevate privileges.
• Use adversary tools: utilize C2 frameworks such as Cobalt Strike, Sliver, Mythic, or Empire.
• Perform social engineering: conduct social engineering assessments, including phishing, vishing, and physical intrusion tests.
• Stay ahead of threats: map attack surfaces using tools like Blood Hound and Sharp Hound and stay current on adversary TTPs using MITRE ATT&CK.
• Develop malware: create custom malware, obfuscate payloads, and bypass EDR/XDR solutions.
• Report and collaborate: generate actionable reports for the blue team with clear risk analysis and work with them to enhance detection and response capabilities.

• Experience:
  
  6+ years of total experience, with at least 4 years of dedicated hands‑on offensive security and red teaming.
• Technical skills: strong command of tools like Metasploit, Cobalt Strike, Burp Suite, and Nmap.
• Scripting: experience with custom script development in Python, Bash, or Power Shell.
• Core knowledge: a deep understanding of Active Directory exploitation, lateral movement, and privilege escalation techniques.
• Frameworks: familiarity with MITRE ATT&CK, NIST, and OWASP.
• Communication: the ability to write detailed reports and clearly communicate complex technical findings to non‑technical stakeholders.

• Mandatory: OSCP, CRTP, OSCE
• Preferred: GRTP, OSEE

• Salary: above industry average

If you’re ready to think like an adversary and secure an organization from the inside out, we want to hear from you.