Red Team Expert

About the role

The Red Team Expert conducts advanced adversary emulation, offensive security assessments and threat simulation exercises to evaluate the organization's security posture. The role simulates real-world cyberattacks based on threat intelligence, identifies weaknesses across enterprise infrastructure, cloud environments and applications, and works with defensive security teams to strengthen detection and response.

Key responsibilities

• Plan and run end-to-end red team engagements covering initial access, privilege escalation, lateral movement and controlled post-exploitation.
• Design attack scenarios from Cyber Threat Intelligence and adversary TTPs, and run phishing and social engineering simulations.
• Assess enterprise networks, cloud environments, web applications and production systems, and configure C2 tools such as Cobalt Strike, Brute Ratel C4 and Nighthawk.
• Develop exploits, payloads and post-exploitation tools, and use vulnerability scanners and web application scanners to find exploitable weaknesses.
• Document findings, assess business and security impact, and give remediation recommendations.
• Work with Blue Team, SOC, Threat Intelligence and Incident Response teams, and ensure compliance with scope and rules of engagement.

Required profile

• Proven experience in red teaming, penetration testing, adversary emulation or offensive security.
• Strong knowledge of the cyberattack lifecycle, MITRE ATT&CK and adversary TTPs.
• Hands-on experience with Active Directory attacks, privilege escalation, lateral movement and persistence.
• Ability to write clear technical reports and work with defensive teams.

Required skills

• C2 frameworks: Cobalt Strike, Brute Ratel C4, Nighthawk
• Vulnerability assessment tools and web application scanners
• Exploit development, scripting and payload customization
• Operational Security (OpSec) and engagement planning

Preferred certifications: OSCP, OSCE, CRTP, CRTO, CRTL, OSWE.