Enterprise Red Teaming

Good As Gold Cyber Technologies Inc.; India; Presencial; INR 750.000 - 1.500.000; Jornada completa

Descripción de la vacante

Good As Gold Cyber Technologies Inc. seeks an experienced Enterprise Red Teaming professional to join our security research division on-site in Kathmandu.

You will plan and execute advanced adversary-simulated assessments to identify security gaps across people, processes, and technology, focusing on enterprise red teaming. You will develop attack scenarios, maintain offensive tools, and collaborate with blue teams to translate findings into practical security improvements.

Formación

• Minimum of 5 years hands-on experience in enterprise red teaming and adversary emulation.
• Deep knowledge of AD attack paths, Kerberos abuse, credential access, lateral movement, and privilege escalation.
• Experience operating C2 frameworks (Cobalt Strike, Sliver, Mythic, Havoc) and building payloads that evade EDR/AV.
• Practical phishing and social engineering tradecraft, initial access techniques, and OPSEC.
• Fluency with MITRE ATT&CK and ability to distinguish red team activity from intrusion.
• Strong analytical judgment to infer user goals from prompts and document reasoning.

Responsabilidades

• Review prompts submitted to an AI system to assess intent (benign vs malicious).
• Determine underlying intent and evaluate legitimate vs harmful usage.
• Apply domain expertise to judge technical context and real-world uplift a response would provide attackers.
• Annotate prompts with an intent label and rationale per guidelines.
• Independently annotate prompts and escalate unresolved cases to a reviewer.
• Flag ambiguous cases and contribute to improving guidelines.

Conocimientos

Red Teaming

Adversary Emulation

C2 frameworks

Phishing/OPSEC

MITRE ATT&CK

English documentation

Herramientas

Cobalt Strike

Sliver

Mythic

Havoc

Descripción del empleo

Company Description

Good As Gold (GAG) Cyber Technologies Inc. is a technology services company specializing in software development, staff augmentation, cybersecurity, and outsourcing/offshoring solutions. The company helps clients extend their in-house capabilities by connecting them with pre-vetted global tech talent and dedicated development teams. GAG Cyber Technologies emphasizes flexibility, cost-effectiveness, and streamlined management by handling recruitment, onboarding, and project oversight. Using agile methodologies and iterative collaboration, the company delivers custom software solutions that align with client goals and timelines. As a trusted partner in software development excellence, GAG Cyber Technologies supports organizations in unlocking the full potential of their projects.

Role Description

The Enterprise Red Teaming role is a full-time, on-site position based in Kathmandu. This role is responsible for planning and executing advanced, adversary-simulated assessments across enterprise environments to identify security gaps in people, processes, and technology. Daily tasks include conducting red team exercises, penetration tests, and threat emulation; documenting findings; and collaborating with blue teams and security stakeholders to improve detection and response capabilities. The role also involves developing attack scenarios, maintaining and updating offensive tools and scripts, and staying current on emerging threats, tactics, techniques, and procedures. The individual will work closely with cross-functional teams to ensure that security recommendations are practical, prioritized, and aligned with business objectives.

The Position

We are seeking a highly motivated and technically proficient Enterprise Red Teaming to join our

security research division. This role is dedicated to determining the true intent behind cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious, with a focus on enterprise red teaming.

You need to be independent, attentive to details, organized, eager to learn new things, and eager to research and solve complex problems.

What you'll do:

• Review cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious


• Determine the underlying intent and goal behind each prompt, and assess whether the user is pursuing a legitimate purpose or an intent to cause harm


• Apply deep domain expertise to judge the technical context, specificity, and real-world uplift a response would give an attacker


• Annotate each prompt with an intent label and a clear written rationale, following the project guidelines


• Independently annotate the same prompts as a second researcher; cases where researchers disagree are escalated to a reviewer


• Flag ambiguous cases, emerging attack techniques, and gaps in the guidelines, and help improve them

Requirements:

• Minimum of 5 years of proven, hands-on experience in enterprise red teaming and adversary emulation


• Deep knowledge of Active Directory attack paths, Kerberos abuse, credential access, lateral movement, and privilege escalation


• Experience operating C2 frameworks (Cobalt Strike, Sliver, Mythic, Havoc) and building payloads and loaders that evade EDR/AV


• Practical phishing and social engineering tradecraft, initial access techniques, and operational security (OPSEC)


• Fluency with the MITRE ATT&CK framework and the ability to tell red team operations from real-world intrusion activity


• Strong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation


• Clear written communication in English, with the ability to document your reasoning

Nice to have:

• Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security