Information Security Specialist - Red Team Operator

We are seeking a skilled Information Security Specialist - Red Team Operator to join our offensive security program and help strengthen our defensive posture through realistic adversary emulation. This role focuses on executing end-to-end red team engagements that simulate real-world threat actors, validate security controls, and provide actionable insight to detection and response teams.

The ideal candidate brings hands-on technical expertise, strong tradecraft, and the ability to operate safely and professionally in a highly governed enterprise environment.

Job Details - What You’ll Do

• Plan and execute full-scope red team engagements, including reconnaissance, initial access, lateral movement, privilege escalation, command-and-control, and objective completion

• Emulate real-world threat actors using established TTPs (e.g., MITRE ATT&CK)

• Conduct phishing and social engineering campaigns within defined legal and ethical constraints

• Develop and maintain custom tooling, payloads, and infrastructure to support operations

• Collaborate closely with Blue Team, Purple Team, Threat Intelligence, and Incident Response partners

• Produce clear, technically accurate engagement reports and executive-ready summaries

• Contribute to detection engineering by identifying gaps in controls, telemetry, and response processes

• Support continuous improvement of red team methodologies, playbooks, and governance processes

• Mentor junior operators and contribute to team knowledge sharing

Job Requirements - What You Need to Succeed

• University degree

• 7+ years of experience in offensive security, red teaming, penetration testing, or equivalent hands-on security roles

• Strong knowledge of Windows Active Directory environments, identity abuse, and enterprise authentication flows

• Proven experience with common red team tooling (e.g., C2 frameworks, phishing platforms, custom payloads)

• Solid understanding of network protocols, operating systems, and endpoint security controls

• Ability to safely execute adversarial activities in regulated environments with strict scope and approval processes

• Strong written and verbal communication skills, including report writing and technical walkthroughs

• Demonstrated ability to work independently while collaborating effectively with cross-functional teams

Other Skills & Assets

• Familiarity with EDR, SIEM, and cloud security controls from an attacker’s perspective

• Experience developing custom tooling in languages such as C#, Python, and PowerShell

• Knowledge of red team infrastructure, domain management, and OPSEC best practices

• Relevant certifications (e.g., CRTO, OSCP, GXPN, Red Team Ops–focused certs)

• Experience in financial services, large enterprises, or highly regulated environments