Red Team Expert

About the Role
The Red Team Expert is responsible for conducting advanced adversary emulation, offensive security assessments, and threat simulation exercises to evaluate the organization’s security posture. The role involves simulating real-world cyberattacks based on threat intelligence, identifying security weaknesses across enterprise infrastructure, cloud environments, and applications, and collaborating with defensive security teams to strengthen detection and response capabilities.

Responsibilities

• Plan and execute end-to-end red team engagements simulating real-world threat actors, including initial access, privilege escalation, lateral movement, and controlled post-exploitation activities.
• Develop realistic attack scenarios based on Cyber Threat Intelligence (CTI), adversary Tactics, Techniques, and Procedures (TTPs), and emerging threats.
• Design and execute targeted phishing and social engineering simulations to assess employee awareness and security control effectiveness.
• Conduct offensive security assessments across enterprise networks, cloud environments, web applications, and production systems.
• Develop and customize exploits, payloads, and post-exploitation tools to evaluate the effectiveness of Endpoint Detection and Response (EDR) solutions and other security controls.
• Configure, deploy, and manage Command-and-Control (C2) infrastructure and frameworks, including Cobalt Strike, Brute Ratel C4, and Nighthawk.
• Apply strong Operational Security (OpSec) practices throughout engagements to maintain controlled, realistic, and discreet testing operations.
• Configure and operate vulnerability assessment and web application security scanning tools; analyze results to identify exploitable weaknesses and attack paths.
• Conduct offensive security research to track emerging vulnerabilities, attack techniques, and adversary methodologies, and develop new tools and testing approaches.
• Document findings, assess business and security impact, and provide actionable remediation recommendations.
• Collaborate with Blue Team, SOC, Threat Intelligence, and Incident Response teams to validate detection capabilities, improve security controls, and strengthen incident response readiness.
• Ensure all testing activities comply with approved scope, rules of engagement, and organizational security policies.

Qualifications

• Proven experience in red teaming, penetration testing, adversary emulation, or offensive security operations.
• Strong understanding of the cyberattack lifecycle, MITRE ATT&CK framework, and real-world adversary TTPs.
• Hands-on experience with Active Directory attacks, privilege escalation, lateral movement, persistence, and post-exploitation techniques.
• Experience conducting advanced phishing simulations and assessing the effectiveness of email security controls.
• Proficiency in assessing enterprise networks, web applications, APIs, cloud environments, and endpoint security solutions.
• Practical experience with C2 frameworks such as Cobalt Strike, Brute Ratel C4, or Nighthawk.
• Knowledge of exploit development, scripting, payload customization, and techniques for evaluating EDR and other security control effectiveness.
• Experience with vulnerability assessment tools, web application scanners, and manual validation of security findings.
• Strong understanding of Operational Security (OpSec), engagement planning, risk management, and rules of engagement.
• Ability to produce clear technical reports, communicate findings effectively, and collaborate with defensive security teams.
• Strong analytical, problem-solving, and research skills, with the ability to adapt to evolving cyber threats.

Preferred Certifications:

• Offensive Security Certified Professional (OSCP)
• Offensive Security Certified Expert (OSCE)
• Certified Red Team Professional (CRTP)
• Certified Red Team Operator (CRTO)
• Certified Red Team Lead (CRTL)
• Offensive Security Web Expert (OSWE)