Offensive Cybersecurity Analyst - Red Team

Equifax, Inc.; Alpharetta (GA); Hybrid; USD 110,000 - 170,000; Full time

Job summary

Equifax, Inc. invites an Offensive Cybersecurity Analyst - Red Team to join a team that emulates real-world threats using TTPs.

You will train defenders, measure protections, and execute engagements with senior operators from Alpharetta, GA, supporting multiple engagements and growing your tradecraft in C2, EDR evasion, and cloud paths. You will collaborate with Global Security and Technology teams to successfully execute the Red Team mission, applying AI tools to enhance threat emulation and

Qualifications

• 2+ years of experience in cybersecurity with hands-on offensive work (pentesting, red teaming, offensive security research, or CTFs/lab projects).
• 1+ years writing code in at least one language such as C, C#, Go, Python, or PowerShell.
• Experience with Windows and Linux internals, AD, and networking fundamentals.

Responsibilities

• Execute threat actor emulation engagements using real-world TTPs and assist planning with senior operators.
• Support multiple concurrent engagements while following ROE, OPSEC, and deconfliction processes.
• Collaborate on building and maintaining secure Red Team C2 infrastructure and tooling.
• Document findings clearly and contribute to detections in purple team exercises with Detection and Response teams.
• Develop tools and extensions for C2, EDR evasion, and stealthy C2 channels under guidance.
• Apply AI tools to speed threat emulation, CVE analysis, and malware analysis; support AI-augmented testing.
• Handle sensitive data and systems in compliance with global financial data company regulations.

Skills

Offensive security

Python/PowerShell

Windows/Linux internals

MITRE ATT&CK

AI/LLM tools

Tools

Cobalt Strike

Sliver

Mythic

Job description

As an Offensive Cybersecurity Analyst - Red Team, you will join a team that emulates real-world threats using threat actor tactics, techniques, and procedures (TTPs). Your primary goal will be to train defenders and measure how well our people, processes, and technology protect our environment. You will execute engagements alongside senior operators, support multiple engagements at once, and grow your tradecraft in areas such as tool development, EDR evasion, and cloud attack paths.

As part of the Global Security organization within Cyber Operations, you will build strong partnerships across Global Security and Technology teams to successfully execute the Red Team mission.

• This position is based out of our Alpharetta, Georgia office.
• We believe great things happen when teams connect. Our schedule is built around 4 days of high-impact, in-office collaboration (Monday–Thursday), paired with Friday Flexibility to wrap up your week remotely.
• This position does not offer immigration sponsorship (current or future) including F-1 STEM OPT extension support.
• This position is not open to third-party vendors or C2C.
• In person interviews are required.

What you will do

• Execute threat actor emulation engagements using real-world TTPs, and contribute to engagement planning alongside senior operators.
• Support multiple concurrent engagements while following rules of engagement, OPSEC standards, and deconfliction processes.
• Collaborate on building and maintaining secure Red Team command and control (C2) infrastructure.
• Document and communicate findings in clear technical reports, and partner with Cyber Detection and Response teams in purple team exercises to develop and validate new detections.
• Contribute to tool development, including beacon object files (BOFs), C2 extensions, EDR evasion techniques, and stealthy C2 channels, under the guidance of senior team members.
• Apply AI tools to speed up threat emulation, CVE analysis, and malware analysis, and to support AI-augmented testing.
• Handle sensitive data and systems responsibly, in line with the legal and regulatory requirements of a global financial data company.

What experience you need

• 2+ years of experience in cybersecurity, including hands-on offensive work (penetration testing, red teaming, offensive security research, or CTFs and lab projects).
• 1+ years of experience writing code in at least one language such as C, C#, Go, Python, or PowerShell.
• Working knowledge of Windows and Linux operating system internals, Active Directory, and networking fundamentals (e.g., IP, TCP, UDP, DNS, HTTP/S).
• Working knowledge of the MITRE ATT&CK framework.
• Experience using AI/LLM tools in technical or security workflows.

What could set you apart

• Industry certifications such as OSCP, OSEP, CRTO, CRTP, or similar.
• Hands-on experience deploying and using C2 frameworks such as Cobalt Strike, Sliver, or Mythic, including building customizations or extensions.
• Experience with Google Cloud Platform (GCP) or Amazon Web Services (AWS), including IAM, service accounts, and automating via API calls.
• Experience building MCP integrations or AI agents.
• A public portfolio such as GitHub projects, blog posts, CVEs, or write-ups on complex security lab environments.
• Experience in financial services or another regulated industry.

#LI-Hybrid

#LI-KD1