Description

You will lead red team exercises against hybrid environments using threat intelligence and the MITRE framework.

This role is on-site.

Responsibilities

• Lead red team and purple team exercises to test cyber detections.
• Build and maintain red/purple team infrastructure, automating functions where possible.
• Conduct ad-hoc offensive security testing using industry-standard or internal tools.
• Own report creation, including compromise narratives, technical findings, risk ratings, and remediation recommendations.
• Assist defense teams during incident investigations by providing attacker tradecraft expertise.

Required Skills

• Approximately 8 years of experience with red team tools: Cobalt Strike, Mythic C2, Rubeus, Bloodhound, or Covenant.
• Expert understanding of red team concepts, automation strategies, and the MITRE framework.
• Expertise in bypassing EDR detections by modifying payloads.
• Expert knowledge of Windows and Linux system hardening.
• Deep understanding of APT compromises in financial institutions without phishing.
• Proficiency in Python, Ruby, PowerShell, or Bash.
• Experience attacking cloud, on-prem, or hybrid environments from initial access to objectives.
• Experience with at least one cloud provider: AWS, GCP, or Azure.
• Ability to measure and rate vulnerabilities based on principal characteristics.

Preferred Skills

• Experience developing custom attack tradecraft or modifying existing tools.
• Experience with automated configuration management like Chef.
• Experience conducting offensive security exercises against macOS, iOS, or ChromeOS.

Key Skills

Education

Any graduate