Red Team Consultant

ARM International; West of England; On-site; GBP 65,000 - 95,000; Full time

Job summary

ARM International is seeking a skilled red team security professional to conduct threat-led assessments and adversary simulations in defence and government contexts. You will design and deploy infrastructure for engagements, produce detailed reports, and work with stakeholders to ensure successful delivery.

The role requires strong technical capabilities across initial access, cloud exploitation, malware development, and evasion techniques, with experience in high-security environments and

Qualifications

• Experience delivering red team, adversary simulation or advanced penetration testing.
• Certifications relating to red teaming.
• Strong technical skills in initial access, cloud exploitation, malware development, detection evasion, operational security, physical security testing or adversary emulation.
• Experience working in Defence, MOD or other high-assurance environments.
• Knowledge of MITRE ATT&CK, CAF or NIST.
• Proficiency in coding languages for OST / Malware development: C, C#, Python, JS, Go, Rust.

Responsibilities

• Deliver threat-led security assessments, adversary emulation and red team activities within complex defence and government environments.
• Support design, provisioning and maintenance of infrastructure used during red team and adversary simulation activities.
• Produce high-quality technical documentation, reports and operational procedures.
• Collaborate with customers, project teams and security stakeholders to scope activities, communicate findings and deliver engagements.
• Deploy and manage security tooling, cloud-based environments and supporting platforms for safe operations.
• Contribute technical expertise throughout the engagement lifecycle from planning to final reporting and replay activities.

Skills

Red team / adversary simulation

Penetration testing

Initial access

Cloud exploitation

Malware development

Detection evasion

Operational security

Physical security testing

Adversary emulation

MITRE ATT&CK

NIST CAF

Programming: C

Programming: C#

Programming: Python

Programming: JS

Programming: Go

Programming: Rust

Job description

• Deliver threat-led security assessments, adversary emulation and red team activities within complex defence and government environment


• Support the design, provisioning and maintenance of infrastructure used during red team and adversary simulation activities.


• Produce high-quality technical documentation, reports and operational procedures.


• Work closely with customers, project teams and security stakeholders to scope activities, communicate findings and support the successful delivery of engagements


• The deployment and management of security tooling, cloud-based environments and supporting platforms required to conduct operations safely and effectively.


• Contribute technical expertise throughout the engagement lifecycle, from planning through to final reporting and replay activities.

Essential Skills and Experience

• Experience delivering red team, adversary simulation or advanced penetration testing activities.


• Relevant certifications relating to red teaming.


• Strong technical skills in one or more of the following areas: initial access, cloud exploitation, malware development, detection evasion, operational security, physical security testing or adversary emulation.


• Experience working within Defence, MOD or other high-assurance environments.


• Understanding of frameworks such as MITRE ATT&CK, CAF or NIST.


• Comfortable with coding languages for OST / Malware development (C,C#, Python, JS, Go, Rust).