Social network you want to login/join with:
Red Team Operator, Senior, Cambridgeshire
Client: [Client details not provided]
Location: Cambridgeshire, United Kingdom
Job Category: Other
-
EU work permit required: Yes
Job Reference:
8d9877b82103
Job Views:
3
Posted:
02.05.2025
Expiry Date:
16.06.2025
Job Description:
Position: Red Team Operator, Senior
Key Role:
Work with a variety of clients, including Fortune 100 companies, to validate security controls and incident response through offensive security operations such as Red and Purple Teaming. Interface directly with client leadership and technical security staff to lead engagements in scenarios ranging from phishing-based initial access to OT or ICS network perimeter testing. Collaborate with a team of 10+ security testing professionals to enhance service offerings and conduct hands-on technical testing focused on detection and response, utilizing customized tooling to bypass AV, EDR, and other protections. Perform full exploitation and leverage access within multiple environments, including complex Active Directory and mixed Windows and Linux environments. Develop comprehensive reports and presentations tailored for technical and executive audiences. Effectively communicate findings and strategies to stakeholders, including technical staff, leadership, and legal counsel. Apply security testing techniques across various projects. Lead small red teams of 1-3 testers, managing staff assignments and delivery. Join a team dedicated to cutting-edge research, innovation, and knowledge sharing.
Basic Qualifications:
* Experience with Linux and Ubuntu, including administration and troubleshooting
* Scripting and programming experience in Perl, Python, Ruby, Bash, C/C++, C#, or Java
* Experience developing or modifying exploits, shellcode, or exploit tools to evade EDRs
* Familiarity with security assessment tools such as Mythic, Burp Suite Pro, Cobalt Strike, Sliver, Havoc, or Covenant
* Experience with Amazon Web Services (AWS), including IAM, EC2, VPC, EBS, S3, and Lambda
* Experience working in Windows environments and assessing Active Directory security, including privilege escalation
* Knowledge of network penetration testing and purple teaming
* Understanding of open security testing standards like OWASP and ATT&CK
* Ability to present technical findings to diverse audiences
* Bachelor’s degree
Additional Qualifications:
* 5+ years in offensive security testing (web app security, network pen testing, red/purple teaming)
* Experience in a commercial environment
* Experience with social engineering tactics like phishing
* Knowledge of assembly languages (x86) and reverse engineering
* Experience with hardware reverse engineering (JTAG, UART)
* Experience with automation tools like Terraform
* Experience with physical security assessments (proxmark3, proximity card spoofing)
* Bachelor’s degree in Computer Engineering, CS, or related field
* Ability to obtain Offensive Security Certifications (OSWP, OSCP, OSCE, OSWE, GAWN, GPEN, GXPN) within one year of hire
Commitment to Non-Discrimination:
All qualified applicants will receive consideration without regard to disability, veteran status, or other protected statuses.
#J-18808-Ljbffr