Attack & Penetration Consultant (Red Team Consultant) - Ciudad de México, CDMX

MissionHires; Ciudad de México; Vor Ort; MXN 1.098.365 - 1.441.207; Vollzeit

Zusammenfassung

MissionHires is seeking a Red Team Consultant for a 12-month engagement with a major bank in Mexico City (CDMX). This role involves end-to-end red team operations, including reconnaissance, design, execution, and reporting.

The ideal candidate will have proven red teaming experience, strong knowledge of cyber security, and the ability to provide clear reporting in Spanish. The daily rate is $400 USD, with work hours from Monday to Friday, 8:00 AM to 5:00 PM.

Qualifikationen

• Mexican national; ability to work on-site in Mexico City, 8 AM–5 PM.
• Experience in financial sector preferred.
• Capability to exploit web application vulnerabilities.

Aufgaben

• Conduct reconnaissance to identify threat pathways.
• Design adversary emulation scenarios.
• Execute red team operations including initial access.

Kenntnisse

Red teaming experience

Adversary emulation

Offensive security expertise

Vulnerability assessments

Penetration testing

Clear communication in Spanish

Jobbeschreibung

MissionHires is supporting our partner to hire a Red Team Consultant (Attack & Penetration) for up to 12 months on-site engagement with a major bank in Mexico City (CDMX). This role focuses on end-to-end red team operations—recon, design, execution, and reporting—evaluating internal networks, servers, detection/response, and real-world adversary simulation. Must be a Mexican national able to work on-site Monday–Friday, 8:00 AM–5:00 PM. Daily rate: $400 USD.

Responsibilities

• Conduct intelligence-driven reconnaissance to identify realistic threat pathways and targets
• Design and plan adversary emulation scenarios aligned to banking threat models
• Execute red team operations including initial access, lateral movement, privilege escalation, and data exfiltration
• Exploit web application vulnerabilities and deploy C2, web shells, and ransomware simulations (as scoped)
• Test internal network and server infrastructure; assess detection and response effectiveness against stealth techniques
• Perform vulnerability assessments, penetration tests, wireless security assessments, and physical/social engineering activities as required
• Simulate real-world attacks without prior knowledge of assets or architecture (black-box approach where applicable)
• Collaborate in daily stand-ups (10–15 min) and weekly syncs (30–60 min) for progress, next steps, and escalation
• Document findings, evidence, and remediation guidance; map outcomes to success indicators (“flags”)
• Adhere to rules of engagement, compliance requirements, and safety controls during testing

Requirements

• Mexican national; based in or able to work on-site in Mexico City (CDMX) Monday–Friday, 8:00 AM–5:00 PM
• Proven experience in red teaming, adversary emulation, and offensive security within enterprise environments (financial sector experience preferred)
• Hands‑on expertise with lateral movement, privilege escalation, data exfiltration, and stealth tradecraft (e.g., OPSEC, EDR evasion)
• Demonstrated ability to exploit web application vulnerabilities and operate C2 frameworks, web shells, and ransomware simulations
• Strong knowledge of Windows and Linux server operations, Active Directory, virtualization platforms, and internal network infrastructures
• Capability to conduct vulnerability assessments, penetration tests, wireless assessments, physical security tests, and social engineering
• Experience operating under strict rules of engagement with measurable success indicators (flags) such as data extraction/modification, service manipulation, inter-system operation injection, and virtualization control
• Clear, concise reporting and stakeholder communication in Spanish; ability to present findings and remediation steps
• Availability for up to 12‑month contract with daily and weekly status sessions
• Rate acceptance: $400 USD daily