Offensive Cyber Operations Red Team Lead

Apex Systems; Tampa (FL); Hybrid; USD 140,000 - 195,000; Full time

Benefits offered by this job

Medical, dental, vision, life coverage

401K with company match

HSA and EAP

Job summary

Everforth Apex Systems in Tampa, FL is seeking an Offensive Cyber Operations Red Team Lead to direct red-team engagements, adversary-emulation campaigns, and reporting. You will mentor staff, coordinate with defenders, and drive threat-informed testing across network, identity, cloud, and human surfaces.

The role combines hands-on testing with leadership, ensuring alignment with requirements, reducing risk, and delivering executive-level risk assessments.

Qualifications

• Seven+ years in offensive security incl. pentesting or red teaming.
• 2+ years leading complex security tests or adversary-emulation.
• Hands-on proficiency in at least one critical security skill with certs.
• Strong expertise in enterprise networks, Windows/AD, identity attacks.
• Understanding of adversarial TTPs.
• Experience with Nessus, Burp Suite, Metasploit, Nmap.
• Deep UNIX and Windows systems knowledge.
• Familiarity with NIST 800-53 and 800-115.
• Cloud and container security experience (AWS/Azure/Kubernetes).
• Purple Team collaboration experience.

Responsibilities

• Lead and execute full-scope Red Team engagements and adversary-emulation campaigns.
• Plan and manage Red Team operations: scope, objectives, ROE, deconfliction.
• Design and run campaign-style attack chains using TTPs.
• Exploit enterprise networks, including Windows/AD and cloud services.
• Evaluate preventive/detective controls; analyze telemetry and alerts.
• Collaborate with Detection, Response, and Purple Team partners.
• Identify systemic control gaps and translate into technical recommendations.
• Coordinate testing processes, ensuring policy/regulatory adherence.
• Guide cyber security decisions on network design, cloud adoption, and threat modeling.
• Produce executive-ready reports with risk and recommendations.
• Mentor Red Team operators in tooling and tradecraft.
• Maintain cross-team alignment with IT, business units.

Tools

Nessus

Burp Suite

Metasploit

Nmap

Job description

Job Description

Offensive Cyber Operations Red Team Lead

Job # 3053359

Location

Tampa, Florida (Hybrid)

Role Overview

Reporting to the Director of the Offensive Cyber Operations team, you will be responsible for executing the strategic direction, vision, and operational accountability for team members performing penetration testing and red team engagements. You will ensure that all testing efforts align with documented requirements, minimizing organizational risk while maintaining a high-quality, resilient assessment program. This role combines deep hands-on technical expertise with leadership responsibilities, including planning and executing adversary-emulation exercises, mentoring team members, coordinating with defensive partners, and delivering executive-level reporting.

Key Responsibilities

• Lead and execute full-scope Red Team engagements and adversary-emulation campaigns across network, identity, cloud, and human attack surfaces.


• Plan and manage Red Team operations, including scope definition, objectives, rules of engagement, operational constraints, and deconfliction.


• Design and execute campaign-style attack chains using adversary tactics, techniques, and procedures (TTPs), including assumed-breach and stealth intrusion scenarios.


• Perform and oversee advanced exploitation of enterprise networks, systems, Windows/Active Directory, identity systems, and cloud services.


• Evaluate and assess preventive and detective controls (e.g., EDR, SIEM, IAM, NAC) by analyzing telemetry and validating alerting/response workflows.


• Collaborate with Detection, Response, and Purple Team partners during live-fire and validation exercises.


• Identify systemic control gaps and end-to-end attack paths and translate business drivers into technical recommendations.


• Administer, coordinate, and implement vendor and internal testing processes, ensuring adherence to procedures, policies, and regulatory frameworks.


• Guide cyber security decisions related to network design, cloud adoption, threat modeling, and new technology integration.


• Oversee evidence collection, attack-chain documentation, and artifact management, producing executive-ready reports that communicate risk and recommendations.


• Mentor, coach, and develop Red Team operators in tooling, tradecraft, and operational discipline.


• Maintain relationships with partners across IT, business units, and other teams to ensure alignment and effective coordination.

Required Qualifications

Experience

• At least seven (7) years of professional-level experience in offensive security, including one or more technical disciplines such as Penetration Testing, Red Teaming, Networking, Firewalls, Server Administration, Encryption, Cloud, Containers, Databases, or Software Development.


• At least two (2) or more years of experience as a penetration tester/red team tester, with proven experience leading complex security testing or adversary-emulation exercises.

Technical Skills

• Hands-on, expert-level technical proficiency in at least one critical skill area, supported by relevant certifications.


• Strong hands-on expertise in enterprise networks, Windows, Active Directory, and identity-based attacks.


• Advanced understanding of adversarial tactics, techniques, and procedures (TTPs).


• Proficiency with multiple open-source and commercial security tools (e.g., Nessus, Burp Suite, Metasploit, Nmap).


• Strong proficiency with both UNIX-based and Microsoft operating systems, with deep systems engineering experience in at least one of them.


• Understanding of security guidelines such as NIST 800-53 and NIST 800-115.


• Strong understanding of enterprise security controls, detection technologies, and incident response workflows.

Preferred Qualifications

• Hold (or be working toward) multiple professional or associate-level certifications relevant to the role; preferred offensive certifications include OSCP, OSEP, CRTO, GXPN (or equivalent).


• Experience with cloud and container security (e.g., AWS, Azure, Kubernetes).


• Background collaborating in Purple Team operations.

Benefits Overview

Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.

Equal Opportunity & Diversity Statement

Everforth Apex Systems is an equal opportunity employer.

We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law.

Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.

If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [email protected] or 804-523-8228.

Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.

UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.

Company Information

© 2026 Everforth, Inc. All rights reserved.

Everforth Apex Systems is part of the Commercial Segment of Everforth, Inc.

NYSE: EFOR

4400 Cox Road

Suite 200

Glen Allen, Virginia 23060

Everforth Apex is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Benefits Department at [email protected] or 804-523-8228. (Do not submit resumes or solicit consultants to this email address). UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex.