The Red Team Expert is responsible for conducting advanced adversary emulation, offensive security assessments, and threat simulation exercises to evaluate the organization’s security posture. The role involves simulating real-world cyberattacks based on threat intelligence, identifying security weaknesses across enterprise infrastructure, cloud environments, and applications, and collaborating with defensive security teams to strengthen detection and response capabilities.
Responsibilities
- Plan and execute end-to-end red team engagements simulating real-world threat actors, including initial access, privilege escalation, lateral movement, and controlled post-exploitation activities.
- Develop realistic attack scenarios based on Cyber Threat Intelligence (CTI), adversary Tactics, Techniques, and Procedures (TTPs), and emerging threats.
- Design and execute targeted phishing and social engineering simulations to assess employee awareness and security control effectiveness.
- Conduct offensive security assessments across enterprise networks, cloud environments, web applications, and production systems.
- Develop and customize exploits, payloads, and post-exploitation tools to evaluate the effectiveness of Endpoint Detection and Response (EDR) solutions and other security controls.
- Configure, deploy, and manage Command-and-Control (C2) infrastructure and frameworks, including Cobalt Strike, Brute Ratel C4, and Nighthawk.
- Apply strong Operational Security (OpSec) practices throughout engagements to maintain controlled, realistic, and discreet testing operations.
- Configure and operate vulnerability assessment and web application security scanning tools; analyze results to identify exploitable weaknesses and attack paths.
- Conduct offensive security research to track emerging vulnerabilities, attack techniques, and adversary methodologies, and develop new tools and testing approaches.
- Document findings, assess business and security impact, and provide actionable remediation recommendations.
- Collaborate with Blue Team, SOC, Threat Intelligence, and Incident Response teams to validate detection capabilities, improve security controls, and strengthen incident response readiness.
- Ensure all testing activities comply with approved scope, rules of engagement, and organizational security policies.
Qualifications
- Proven experience in red teaming, penetration testing, adversary emulation, or offensive security operations.
- Strong understanding of the cyberattack lifecycle, MITRE ATT&CK framework, and real-world adversary TTPs.
- Hands-on experience with Active Directory attacks, privilege escalation, lateral movement, persistence, and post-exploitation techniques.
- Experience conducting advanced phishing simulations and assessing the effectiveness of email security controls.
- Proficiency in assessing enterprise networks, web applications, APIs, cloud environments, and endpoint security solutions.
- Practical experience with C2 frameworks such as Cobalt Strike, Brute Ratel C4, or Nighthawk.
- Knowledge of exploit development, scripting, payload customization, and techniques for evaluating EDR and other security control effectiveness.
- Experience with vulnerability assessment tools, web application scanners, and manual validation of security findings.
- Strong understanding of Operational Security (OpSec), engagement planning, risk management, and rules of engagement.
- Ability to produce clear technical reports, communicate findings effectively, and collaborate with defensive security teams.
- Strong analytical, problem-solving, and research skills, with the ability to adapt to evolving cyber threats.
- Preferred Certifications:
- Offensive Security Certified Professional (OSCP)
- Offensive Security Certified Expert (OSCE)
- Certified Red Team Professional (CRTP)
- Certified Red Team Operator (CRTO)
- Certified Red Team Lead (CRTL)
- Offensive Security Web Expert (OSWE)