Engineer III – Red Team

Responsibilities

• Plan and execute complex covert Red Team operations from initial compromise to achieving defined high‑value objectives, maintaining operational security throughout.
• Develop, customize, and deploy advanced offensive tooling, exploits, and implants to bypass security controls and maintain persistence within target environments.
• Conduct vulnerability research, cyber security assessments, and social engineering campaigns as part of Red Team engagement.
• Collaborate closely with Cyber Threat Intelligence to incorporate real‑world adversary TTPs and create intelligence‑driven attack scenarios.
• Produce high‑quality, executive‑level reports detailing simulation findings, observed defensive gaps, and prioritized, actionable remediation recommendations.
• Facilitate detailed Purple Team exercises by working directly with Incident Response analysts to share offensive techniques and validate detection and response capabilities in real‑time.
• Present findings and strategic recommendations to technical and executive stakeholders.
• Stay current with emerging offensive technologies, adversary TTPs, and defensive countermeasures.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent work experience.
• 6+ years of progressive experience in cybersecurity, with at least 4 years dedicated to Red Team operations, advanced penetration testing, or offensive security research.
• Advanced knowledge and hands‑on experience in full lifecycle of Red Team engagement and advanced penetration testing methodologies.
• Expertise with common red team toolsets (e.g., Cobalt Strike, Nighthawk C2, Metasploit, Evilginx).
• Strong understanding of network protocols, operating system internals (Windows, Linux, MacOS), cloud security, and defensive security technologies.
• Familiarity with intelligence frameworks such as MITRE ATT&CK for mapping and emulating adversary behavior.
• Proven ability to bypass advanced security defenses and demonstrate impact on critical business assets.
• Hands‑on experience with at least one scripting or programming language for tooling and automation (e.g., Python, Go, Powershell).
• Strong written and verbal communication skills, with the ability to articulate complex technical vulnerabilities and operational findings to a non‑technical audience.