Red Team Operator

Role Overview and Core Responsibilities

Conduct comprehensive threat emulation exercises, actively simulating cyber-attacks to uncover vulnerabilities in systems, networks, and applications.
Collaborate with cross-functional teams to perform purple team exercises that challenge the organization's overall security posture.
Perform lateral movement within target environments to assess the effectiveness of internal network segmentation and access controls.
Demonstrate expertise in local privilege escalation techniques.
Emulate threat actors by replicating their techniques, tactics, and procedures to identify vulnerabilities and gaps in our defensive measures.
Develop and utilize custom scripts, tools, and frameworks to enhance red team operations and mimic real-world attacks.
Conduct reconnaissance activities to gather intelligence on potential targets and identify attack vectors.
Test the security of cloud-based environments and identify weaknesses in configurations, access controls, and data protection mechanisms.
Document and communicate findings, risks, and recommendations in clear and concise reports to stakeholders, including technical and non-technical audiences.

Required Knowledge and Experiences
5+ years of active experience in conducting penetration tests and actively working as a red teamer; proven track record in performing red team operations and purple team operations.
Proficiency in ability to compromise a modern organization, escalate privileges, move laterally through complex networks, and achieve adversary goals.
Strong experience and expertise in phishing techniques, social engineering tactics, and other initial access methods.
Extensive experience in writing comprehensive and well-structured reports detailing findings, risks, and actionable recommendations.
Basic development experience (python/bash/git/etc) to create custom solutions for bleeding edge problems.