Senior Red Team Engineer

JR United Kingdom; Newcastle upon Tyne; Remote; GBP 65,000 - 90,000; Full time

Job summary

A global financial institution is seeking a Senior Red Team Engineer to enhance its offensive security team. This role involves leading sophisticated red team operations targeting various systems and assets while utilizing advanced methodologies. Candidates should possess substantial experience in red teaming, custom tooling, and a range of threats to effectively simulate adversarial tactics in a high-impact environment.

Qualifications

• 3–4+ years of dedicated red teaming experience.
• Strong scripting or development skills in Python, Go, C#, C.
• Knowledge of MITRE ATT&CK frameworks.

Responsibilities

• Designing and executing full kill-chain red team operations.
• Emulating APT behaviors, including custom tooling.
• Collaborating with detection teams.

Skills

Evasive payload development

Custom tooling

Windows internals

Social engineering

Scripting skills

Development skills

Tools

Sliver

Mythic

Cobalt Strike

Job description

Location: United Kingdom (Remote)

A global financial institution is hiring a Senior Red Team Engineer to join its internal offensive security team. This role offers a unique opportunity to work within a mature, highly capable global red team that focuses exclusively on real-world adversary simulation, not generic penetration testing.

The successful candidate will lead and execute sophisticated red team operations across the bank’s global footprint, covering endpoint, network, application, cloud, physical, and human vectors. A deep understanding of attacker tradecraft, the ability to build custom tooling, and a mindset of thinking like an adversary are essential.

We seek someone with substantial expertise in at least one red teaming area, such as evasive payload development, infrastructure, Windows internals, social engineering, etc. This hands-on technical role is suited for individuals with several years of dedicated offensive security experience, eager to operate in a high-trust, impactful environment.

Key responsibilities include:

• Designing and executing full kill-chain red team operations targeting enterprise assets and staff
• Emulating real-world APT behaviors, including custom tooling, C2 infrastructure, lateral movement, and exfiltration
• Collaborating with detection and response teams to test visibility and resilience
• Leading campaign design, execution, and reporting with a focus on realism and impact
• Developing or modifying tools, exploits, and payloads as needed
• Supporting threat-led testing programs and integrating threat intelligence
• Maintaining operational security and professional discipline

Qualifications include:

• 3–4+ years of dedicated red teaming experience
• Expertise in areas such as evasions, custom malware, cloud red teaming, physical access, phishing infrastructure, or post-exploitation
• Strong scripting or development skills (e.g., Python, Go, C#, C)
• Experience with red team frameworks like Sliver, Mythic, Cobalt Strike, and a willingness to explore beyond
• Knowledge of adversary emulation frameworks and MITRE ATT&CK
• Bonus: experience with social engineering or physical red teaming
• Excellent communication skills, capable of explaining technical risks to non-technical audiences
• High personal ownership, operational maturity, and discretion

This position offers the chance to work within one of the most well-resourced offensive security programs in financial services, with global scope, innovative freedom, and a mission-critical focus.