Cyber Red Team Operator

Brown Brothers Harriman & Co.; Boston (MA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive benefits

Job summary

Brown Brothers Harriman is seeking a highly skilled Senior Cyber Red Team Operator to join our growing Red Team and help strengthen the firm's ability to detect, respond to, and withstand sophisticated cyber threats.

In this role you will simulate real-world adversaries through advanced red team operations, adversarial emulation, penetration testing, and purple team exercises across enterprise infrastructure, cloud, applications, and identities.

Qualifications

• 8-10 years of experience in Information Security with offensive security focus.
• Experience planning and executing enterprise-scale red team engagements and multi-stage attack scenarios.
• Deep understanding of attacker methodologies, MITRE ATT&CK, privilege escalation, lateral movement, C2, persistence, and identity-based attacks.
• Hands-on experience testing Windows, Linux, AD, cloud, networks, and enterprise applications.
• Scripting and automation using Python, PowerShell, Bash, or similar languages.
• Ability to communicate complex concepts to technical and non-technical audiences.
• Bachelor's degree in relevant field or equivalent practical experience.
• Expertise with security assessment methodology, vulnerability management, OWASP, CVE ratings.
• Participation in Cyber Tabletop Exercises as SME for adversary behavior.

Responsibilities

• Understand and implement BBH Red Team Operating Standard and ROE per regulatory guidelines.
• Conduct risk assessments of vulnerabilities and write reports to facilitate mitigations.
• Lead and execute red team engagements, adversary emulation, and offensive security assessments.
• Simulate threat actor TTPs to validate vulnerabilities through controlled exploitation.
• Manage testing engagements from planning through final reporting.
• Lead purple team exercises to validate security controls and improve visibility.
• Research emerging threats and evolving offensive security techniques.
• Deliver technical reports and executive risk summaries.
• Mentor team members and contribute to Red Team methodologies.

Skills

Red Team Ops

Offensive Security

Adversary Emulation

Penetration Testing

MITRE ATT&CK

Cloud Security

Scripting (Python)

Communication

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent

Tools

Core Impact

AttackForge

Python

PowerShell

Bash

Job description

At BBH, Partnership is more than a form of ownership—it’s our approach to business and relationships. We know that supporting your professional and personal goals is the best way to help our clients and advance our business. We take that responsibility seriously. With a 200-year legacy and a shared passion for what's next, this is the right place to build a fulfilling career.

About the Role

At Brown Brothers Harriman, cybersecurity is a critical enabler of trust, resilience, and innovation. We are seeking a highly skilled Senior Cyber Red Team Operator to join our growing Red Team and help strengthen the firm's ability to detect, respond to, and withstand sophisticated cyber threats. In this role, you will simulate real-world adversaries through advanced red team operations, adversarial emulation, penetration testing, and purple team exercises. You will work across enterprise infrastructure, cloud environments, applications, identity platforms, and emerging technologies to identify vulnerabilities, validate attack paths, and improve BBH's overall security posture. As a senior member of the team, you will help shape offensive security strategy, mentor developing operators, and collaborate closely with security and technology stakeholders across the organization.

Key Responsibilities

• Understand and implement BBH Red Team Operating Standard and conditional Rules of Engagement in accordance with regulatory guidelines and best practices
• Conduct risk assessments of vulnerabilities identified and write reports to facilitate the mitigations and remediations needed to improve BBH security posture
• Lead and execute red team engagements, adversary emulation exercises, and offensive security assessments including network, application, cloud, identity, endpoint, and infrastructure security testing
• Simulate sophisticated threat actor tactics, techniques, and procedures (TTPs) to validate vulnerabilities through controlled exploitation and realistic attack scenarios
• Manage testing engagements from planning through final reporting and validation
• Lead purple team exercises to validate security controls, improve visibility into attacker activity, and strengthen organizational resilience
• Research emerging threats and evolving offensive security techniques
• Deliver technical reports and executive-level risk summaries
• Mentor team members and contribute to Red Team methodologies and best practices
• Collaborate with security and technology stakeholders to drive remediation and improve security effectiveness

Required Qualifications

• 8-10 years of experience in Information Security, with significant experience in offensive security, red team operations, adversary emulation, or penetration testing.
• Demonstrated experience planning and executing enterprise-scale red team engagements and multi-stage attack scenarios.
• Deep understanding of attacker methodologies, MITRE ATT&CK, privilege escalation, lateral movement, command and control, persistence mechanisms, and identity-based attacks.
• Hands‑on experience testing Windows, Linux, Active Directory, cloud platforms, network infrastructure, and enterprise applications.
• Experience with scripting and automation using technologies such as Python, PowerShell, Bash, or similar languages.
• Experience identifying, exploiting, and documenting complex vulnerabilities and attack paths.
• Ability to communicate complex technical concepts clearly to technical and non-technical audiences.
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
• Expertise with security assessment methodology, vulnerability management, OWASP model, CVE ratings
• Participate in Cyber Tabletop Exercises as a subject matter expert for adversary behavior, intent, and TPPs

Nice-to-Haves

• Financial services or other highly regulated industry experience.
• Relevant offensive security certifications such as PNPT, OSCP, OSEP, OSWE, CRTO, CRTE, GRTP, or equivalent advanced offensive security credentials.
• Experience with commercial offensive security and penetration testing management platforms, including Core Impact and AttackForge, preferred.
• Experience conducting cloud security assessments in Microsoft Azure environments.
• Experience participating in purple team exercises that validate security controls, test defensive coverage, improve organizational resilience, and facilitate collaboration between offensive and defensive security teams to strengthen overall security effectiveness.
• Contributions to open-source security projects, public research, conference speaking, or community involvement.

Why BBH

At BBH, you'll join a collaborative team that values curiosity, innovation, and diverse perspectives. Our Red Team operates at the forefront of offensive security, helping protect critical business operations through realistic adversary simulation and proactive security testing.

What You'll Gain

Opportunities to conduct impactful, enterprise-scale red team operations. Exposure to modern cloud, identity, application, and infrastructure security challenges. Opportunities to mentor others and influence the future direction of BBH's offensive security program. Competitive compensation and comprehensive benefits. A culture that promotes inclusion, collaboration, and long-term career growth.

Salary Range

Salary Range NJ: $120,000 - $160,000 base salary + annual target bonus
Salary Range MA: $110,000 - $160,000 base salary + annual target bonus
BBH and its affiliates' compensation program includes base salary, discretionary bonuses, and profit-sharing. The anticipated base salary range(s) shown above are only for the indicated location(s) and may differ in other locations due to cost of living and labor considerations. Base salaries may vary based on factors such as skill, experience and qualification for the role. BBH's total rewards package recognizes your contributions with more than just a paycheck—providing you with benefits that enhance your experience at BBH from long-term savings, healthcare, and income protection to professional development opportunities and time off, our programs support your overall well-being.

Benefits

Competitive compensation and comprehensive benefits. A culture that promotes inclusion, collaboration, and long-term career growth. We value diverse experiences. We value diverse experiences and transferrable skillsets. Our total rewards package includes long-term savings, healthcare, income protection, professional development opportunities, and time off.

Equal Opportunity

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, age, genetic information, creed, marital status, sexual orientation, gender identity, disability status, protected veteran status, or any other protected status under federal, state or local law.

About BBH

Brown Brothers Harriman (BBH) is a premier global financial services firm, known for premium service, specialist expertise, technology solutions and partnership approach to client management. Across Investor Services and Capital Partners, we work with an enviable roster of sophisticated clients who make BBH their first call when they are tackling their hardest challenges. Delivering for our clients and each other energizes us. We believe that how we do our work is just as important as what we do. We are relentless problem solvers who know our best ideas come from collective debate and development—so we are never possessive about our ideas. Every day we come together as a diverse community of smart and caring people to deliver exceptional service and expert advice—creating success that lasts. No matter where you sit in the organization, everyone is empowered to contribute their ideas.