Red operator

Job Description:

Description & Responsibilities:

• Execute offensive security engagements, with a focus on advanced red team operations
• Engage with key service customers, partners, and stakeholders across the enterprise to drive improved security outcomes
• Identify, develop, and promote new red team capabilities and improve Adversary Simulation’s overall program maturity
• Technical mentorship and skill development of junior team members

Experience Required:

• Overall 15+ years of IT and/or information security experience
• Minimum 7 years spent performing red team engagements or advanced offensive security exercises in a professional environment
• Deep understanding of cybersecurity principles, network security, and modern attack vectors
• Advanced understanding of modern network and host-based attacks and OPSEC-related considerations for offensive tradecraft
• Proven experience bypassing modern security controls to accomplish operational objectives
• Proficiency in scripting languages (Python, PowerShell, Bash) and familiarity with programming languages (C/C++, C#)
• Experience with or an understanding of:
• Command and Control frameworks (and related OPSEC considerations)
• Cloud Platforms/Environments
• Active Directory Exploitation
• Web Application Exploitation
• Social Engineering
• Exploit Development
• Reverse engineering
• Demonstrated ability to produce comprehensive reports and explain complex technical details in a concise, understandable manner
• Ability to manage and balance own time among multiple tasks while leading/facilitating work for junior operators during engagements when required

Experience Desired:

• Experience performing offensive security operations within the healthcare industry
• Familiarity with cloud environments (AWS, Azure, GCP) and associated security challenges
• Knowledge of healthcare regulations such as HIPAA and their implications for security practices

Education and Training Required:

• Bachelor’s degree in Computer Science, Information Security, or a related field. Equivalent experience may be considered
• Relevant certifications such as OSCP, OSCE, OSEP, GXPN, CRTO, or similar

Primary Skills:

• Advanced knowledge and experience in offensive security techniques and red teaming
• Ability to emulate sophisticated adversaries and design realistic attack scenarios
• Excellent analytical and critical thinking skills with keen attention to detail

Additional Skills:

• Ability to work effectively in a collaborative environment with cross-functional teams
• Flexibility to adapt to evolving security challenges and stay current with emerging threats
• Willingness and ability to mentor and develop junior team members