Red Team Expert

Role overview

Responsibilities

• Plan and execute red team engagements from initial access through controlled post-exploitation.
• Build scenarios from cyber threat intelligence, adversary TTPs, and emerging threats; conduct phishing and social engineering simulations.
• Assess enterprise networks, cloud environments, web applications, APIs, and production systems.
• Develop exploits, payloads, and testing tools; configure C2 infrastructure such as Cobalt Strike, Brute Ratel C4, and Nighthawk.
• Apply OpSec and operate vulnerability assessment and web application scanning tools to identify exploitable paths.
• Research vulnerabilities and attack techniques; document findings, impacts, and remediation recommendations.
• Collaborate with defensive teams to validate detection and improve controls and incident readiness.
• Follow approved scope, rules of engagement, and organizational security policies.

Qualifications

• Experience in red teaming, penetration testing, adversary emulation, or offensive security operations.
• Strong knowledge of the attack lifecycle, MITRE ATT&CK, and real-world adversary TTPs.
• Hands-on Active Directory attack, privilege escalation, lateral movement, persistence, and post-exploitation experience.
• Experience with phishing simulations, enterprise and cloud assessments, web applications, APIs, and endpoint security.
• Practical C2 framework experience, such as Cobalt Strike, Brute Ratel, or Nighthawk.
• Knowledge of exploit development, scripting, payload customization, vulnerability tools, and manual validation.
• Strong understanding of OpSec, engagement planning, risk management, and rules of engagement.
• Clear technical reporting, communication, collaboration, analytical, problem-solving, and research skills.
• OSCP, OSCE, CRTP, CRTO, CRTL, or OSWE certification is preferred.