Security Engineer – Red Team Operator

About the role

The Red Team Operator will simulate real‑world adversaries to evaluate the organization’s ability to prevent, detect, investigate, and respond to cyber‑attacks. This mid‑career position (3‑5 years) combines offensive execution with the design and maintenance of evasive infrastructure.

Key responsibilities

• Execute authorized red‑team engagements emulating MITRE ATT&CK tactics across the full attack chain, from reconnaissance to persistence.
• Deploy, manage, and securely teardown red‑team infrastructure such as C2 servers, redirectors, domains, VPNs, and cloud resources.
• Develop and adapt payloads, implants, and tools to bypass EDR, AV, network, email, and identity controls.
• Build AI‑enabled offensive security pipelines and assess AI applications for exploitable weaknesses.
• Analyze telemetry, identify detection gaps, and collaborate with threat‑hunting, detection‑engineering, and incident‑response teams (purple‑team activities).
• Document findings, produce technical and executive reports, and mentor junior operators.

Required profile

• 3–5 years of experience in red‑team operations, penetration testing, or adversary emulation.
• Degree in Computer Science, Cybersecurity, or related field, with strong English communication skills.
• Hands‑on experience with C2 frameworks and infrastructure‑as‑code.
• Relevant certifications (OSCP, CRTO, OSEP, OSWE, GPEN) are a plus but not mandatory.

Required skills

• Deep knowledge of Windows, Linux, Active Directory, networking, and authentication systems.
• Cloud platforms (AWS, Azure, GCP) and identity/SSO/MFA concepts.
• Scripting/programming: Python, PowerShell, Bash, Go, C#, C/C++, JavaScript.
• Experience with EDR/SIEM telemetry analysis.
• Familiarity with AI‑assisted security workflows.