Remote Red Team Operator: Pen Test & Threat Emulation

barclays; United Kingdom; Remote; GBP 90,000 - 130,000; Full time

Job summary

Barclays is seeking a Red Team Operator to join a skilled, close-knit team that loves this work. You’ll perform full-scope red team engagements, emulating adversaries to test defenses across cyber, physical, social engineering, and process surfaces.

You’ll design phishing and social engineering campaigns end-to-end, set up infrastructure, craft convincing pretexts, and develop payloads. You’ll work with defenders to improve detection and resilience and stay ahead of emerging threats.

Qualifications

• Hands-on red team role focusing on cyber, physical, social engineering, and processes.
• Experience delivering phishing and social engineering campaigns end to end.
• Proficiency with C2 frameworks and defensive evasion techniques.

Responsibilities

• Take part in full-scope Red Team engagements against cyber, physical, social engineering, and process attack surfaces.
• Design and deliver phishing and social engineering campaigns end to end.
• Operate and tune Command and Control frameworks (Cobalt Strike, Nighthawk) through initial access, post-exploitation, and lateral movement.
• Develop custom tooling, tradecraft, and EDR/defence-evasion techniques.
• Turn engagements into clear attack narratives for engineers and executives.
• Collaborate with defensive teams to improve detection and resilience.
• Research emerging TTPs and bring new techniques to the team's methodology.

Skills

Red Team

Threat emulation

Social engineering

Phishing campaigns

Education

Certifications like CRTO, OSCP / OSEP, CRTP or CREST (CCSAS / CCRTS) welcome

Tools

Cobalt Strike

Nighthawk

Job description

Barclays is seeking a Red Team Operator to join a skilled, close-knit team that loves this work. You’ll perform full-scope red team engagements, emulating adversaries to test defenses across cyber, physical, social engineering, and process surfaces.

You’ll design phishing and social engineering campaigns end-to-end, set up infrastructure, craft convincing pretexts, and develop payloads. You’ll work with defenders to improve detection and resilience and stay ahead of emerging threats.