Red Team Analyst

We are seeking a skilled Red Team Engineer to simulate real-world cyber adversaries and assess the organization’s detection and response capabilities. The role involves planning and executing adversary emulation, breach & attack simulations, and advanced penetration testing to identify security gaps across people, process, and technology. Key Responsibilities Red Team Operations Conduct red team engagements simulating real-world threat actors and attack scenarios. Perform external and internal reconnaissance , OSINT, and attack surface mapping. Execute initial access techniques , including: Phishing and social engineering Credential attacks Exploitation of exposed services and web vulnerabilities Perform post-exploitation activities such as: Privilege escalation Lateral movement Persistence Credential harvesting Adversary Emulation Emulate threat actor behavior using the MITRE ATT&CK framework . Design and execute attack chains across endpoints, Active Directory, networks, applications, and cloud environments. Maintain strict OPSEC during red team engagements to avoid detection unless intended. Tooling & Infrastructure Use and manage red team tools and frameworks such as: Metasploit, Nmap, Burp Suite, CrackMapExec, BloodHound C2 frameworks (e.g., Cobalt Strike, Sliver, Mythic) Assist in setting up attack infrastructure (domains, redirectors, phishing frameworks, payload hosting). Perform basic evasion techniques against AV/EDR/XDR solutions. Reporting & Collaboration Document findings, attack paths, and evidence in a clear and structured manner. Prepare red team reports , including: Executive summary Attack narrative & kill chain MITRE technique mapping Risk impact and recommendations Support remediation validation and re-testing activities. Required Qualifications Education Bachelor’s degree in Computer Science, Information Security, or a related field (preferred). Experience 1–3 years of experience in red teaming, penetration testing, or offensive security. Hands-on experience with network, web, Active Directory, and endpoint attacks . Technical Skills (Required) Strong understanding of: TCP/IP, DNS, HTTP/S Windows & Linux internals Active Directory fundamentals Knowledge of: OWASP Top 10 vulnerabilities Authentication and authorization flaws Familiarity with: MITRE ATT&CK framework Red Team methodologies and engagement rules Nice to Have / Preferred Experience with: Active Directory attacks (Kerberoasting, AS-REP Roasting, Pass-the-Hash) Phishing simulation campaigns Cloud security testing (AWS/Azure misconfigurations) Scripting skills in Python, Bash, or PowerShell Exposure to EDR/XDR evasion techniques Experience in Red Team Certifications (Preferred, Not Mandatory) CRTO (Certified Red Team Operator) OSCP CRTE / CRTP