Senior Engineer- Compliance- Red Team Specialist

Job Description

Design and execute attack scenarios mapped to MITRE ATT&CK techniques

Assist in maintaining and enhancing internal offensive security toolkits and operator playbooks

Develop or modify scripts in Python, Power Shell, and Bash to support Red Team activities

Conduct phishing, vishing, and other social engineering attacks to assess human-layer risk

Maintain strict operational security during engagements, including infrastructure hygiene, traffic obfuscation, and log minimization

Ensure all engagements are executed safely without disrupting production environments

Produce detailed technical reports documenting attack paths, vulnerabilities, and exploitation techniques

Map findings to MITRE ATT&CK techniques and provide clear, actionable remediation guidance

Participate in purple team debriefs to help defensive teams understand attacker techniques and detection improvement opportunities

Collaborate closely with SOC, Incident Response, and engineering teams to validate detections and enhance defensive capabilities

Support the development of detection use cases, logging improvements, and incident response playbooks

Pay Rate will be between $10-$14 an hour depending on skills and experience.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.

If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to  learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:

• 4–7 years of experience in Information Security Compliance, Red Team, or a related field
• Proven experience conducting Red Team assessments and infrastructure penetration testing
• Hands‑on experience operating within Red Team environments

• Ability to execute end‑to‑end attack chains, including reconnaissance, exploitation, lateral movement, persistence, and exfiltration
• Conduct internal and external attack simulations emulating realistic threat actor TTPs
• Demonstrated experience with exploitation, privilege escalation, lateral movement, and post‑exploitation techniques across Windows and Linux environments
• Strong understanding of network protocols, authentication mechanisms, and common security misconfigurations
• Perform web application, infrastructure, and cloud‑focused attacks as part of multi‑vector engagements
• Experience utilizing command‑and‑control (C2) frameworks such as Cobalt Strike, Empire, or Covenant to develop and manage covert operations
• Proven ability to think creatively and simulate an attacker mindset
• Ability to operate discreetly and ethically under strict confidentiality controls
• Provide training and delegate tasks to lower‑level security engineers
• Excellent written communication and technical documentation skills
• Collaborate with analysts and engineers to test, validate, and deploy remediation fixes

• Experience with Active Directory attack paths, including Kerberoasting, AS‑REP Roasting, constrained and unconstrained delegation abuse, DCsync/DCshadow, and Blood Hound path reduction
• Practical offensive security experience in Azure/Microsoft 365 (Entra ) and/or Google Cloud Platform (GCP), including identity abuse, misconfigured roles and policies, workload identity takeover, OAuth application abuse, and cross‑tenant risks
• Initial access tradecraft, including macro‑less delivery, HTA/JavaScript techniques, OAuth abuse, token replay, and cloud misconfiguration pivots
• Experience building operator‑grade…