Senior Red Team Operator

G-Research; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Lunch provided

Barista bar

30 days leave

Pension contributions 9%

Healthcare & life assurance

Job summary

G-Research in London is seeking an experienced Adversary Emulation professional to join the AE Red Team within Security Assurance. Engagements range from weeks to over a year, emulating various threat actors to test systems and processes.

The role offers opportunities to tackle complex problems in a collaborative, high-skill environment. The ideal candidate has multiple years in offensive security, strong scripting in PowerShell/Python, and programming in C/C++ (with Windows 11 and Linux admin

Qualifications

• Several years’ experience conducting offensive security operations.
• Strong communication and analytical skills with attention to detail.
• Ability to emulate threat actors while remaining realistic.
• Sound decisions in ambiguous, fast-changing environments.
• Experience with Windows 11 and Linux administration.
• Programming in C/C++, Go or C# and scripting in PowerShell/Python.
• Advanced understanding of operational security and defense evasion.

Responsibilities

• Research threat actors and target environments to design realistic attack paths.
• Develop custom tooling, tradecraft and TTPs to support offensive operations.
• Execute adversary emulation engagements and adapt approaches as needed.
• Document and share technical knowledge and operational experience.
• Provide subject matter expertise on emerging cyber threats and techniques.
• Contribute to the ongoing improvement of tooling and processes.

Skills

Red Teaming

Threat Modelling

Offensive Security

Scripting: PowerShell

Python

C/C++

Linux Admin

Windows 11 Admin

Operational Security

Communication

Job description

We tackle the most complex problems in quantitative finance, by bringing scientific clarity to financial complexity.

From our London HQ, we unite world-class researchers and engineers in an environment that values deep exploration and methodical execution - because the best ideas take time to evolve. Together we’re building a world-class platform to amplify our teams’ most powerful ideas.

Take the next step in your career.

The role

The Adversary Emulation (AE) team is G-Research’s internal Red Team and a core part of the wider Security Assurance function. The team provides the Board and Executive Management Team with independent insight into the security of our most important information, helping to inform security decisions at the highest levels of the business.

AE operations range from a few weeks to more than a year. Each engagement emulates different internal and external threat actors, testing a broad range of systems, processes and assumptions. The variety and complexity of this work creates continuous opportunities to tackle challenging problems, develop technical expertise and work as part of a highly collaborative team.

Key responsibilities of the role include:

• Researching threat actors, target environments and defensive controls to design realistic attack paths and operation-specific kill chains
• Developing custom tooling, tradecraft and tactics, techniques and procedures (TTPs) to support offensive operations
• Executing adversary emulation operations, contributing to operational decision-making and adapting approaches as new information emerges
• Documenting and sharing technical knowledge, operational experience, OPSEC techniques and ways of working
• Providing subject matter expertise on emerging cyber threats and offensive security techniques
• Contributing to the continuous improvement of team tooling, processes and operational capabilities

Who are we looking for?

The ideal candidate will have the following skills and experience:

• Several years’ experience conducting offensive security operations, such as red teaming or computer network operations, ideally within technology or financial services
• Strong communication, organisational and analytical skills, with excellent attention to detail
• Ability to identify novel attack paths and achieve operational objectives while maintaining realistic threat actor emulation
• Ability to make sound decisions and deliver results in ambiguous, fast-changing environments
• Administrator-level experience in Windows 11 and Linux systems
• Strong scripting skills in Powershell, Python or similar, and programming experience in languages such as C/C++, Go or C#
• Advanced understanding of operational security, offensive techniques and defensive technologies, including how security controls can be bypassed or mitigated
• Highly competitive compensation plus annual discretionary bonus
• Lunch provided (via Just Eat for Business) and dedicated barista bar
• 30 days’ annual leave
• 9% company pension contributions
• Informal dress code and excellent work/life balance
• Comprehensive healthcare and life assurance