Red Team Expert

About the Role

As part of our Cyber Assurance Team in the Information Risk Management Department, you will significantly contribute to enhancing our organization's security defenses. Working under the supervision of the Cyber Assurance Lead, your role focuses on identifying vulnerabilities and validating security controls through simulated offensive operations.

Key Responsibilities

• Designing and carrying out comprehensive red team engagements that simulate realistic threat actor behaviors including gaining initial system access, escalating privileges, and lateral network movement.
• Executing sophisticated social engineering and phishing campaigns aimed at circumventing advanced email security gateways.
• Conducting in-depth technical assessments across multifaceted production ecosystems, covering network infrastructures, cloud platforms, and application environments.
• Creating tailored malware, exploits, and post-exploitation utilities engineered to avoid detection by Endpoint Detection and Response (EDR) systems and other security defenses.
• Implementing and managing command-and-control (C2) infrastructures using tools such as Cobalt Strike, Brute Ratel C4, and Nighthawk C2.
• Enforcing strict operational security (OpSec) measures to ensure all offensive operations remain stealthy and undetected by defenders.
• Pursuing ongoing research and development to maintain awareness of the newest offensive tactics, techniques, and procedures (TTPs) and to innovate new offensive security tools and methodologies.

Required Qualifications

• Certifications such as OSCP, OSCE, CRTP, CRTO, and CRTL are essential to demonstrate proficiency in offensive security disciplines.