Red Team Lead, Offensive Cyber Ops (Hybrid)

WorkNovas LLC; Tampa (FL); Hybrid; USD 140,000 - 190,000; Full time

Job summary

WorkNovas LLC is seeking an Offensive Cyber Operations Lead in Tampa. Hybrid role with responsibilities spanning red team engagements, adversary emulation, and cross‑functional collaboration to improve detection, response, and resilience.

You will drive end‑to‑end assessment methodologies, tool selection, and reporting to executive stakeholders. The ideal candidate has 7+ years in offensive security, strong hands‑on expertise in multiple domains, and professional certifications.

Qualifications

• Have at least seven (7) years of professional level experience in offensive security, including one or more technical disciplines such as Penetration Testing, Red Teaming, Networking, Firewalls, Server Administration, Encryption, Cloud, Containers, Databases, or Software Development.
• Have at least two (2) or more years of experience as a penetration tester/red team tester, and proven experience leading complex security testing or adversary emulation exercises.
• Possess hands-on, expert level technical proficiency in at least one critical skill area, supported by relevant certifications.
• Hold (or be working toward) multiple professional or associate level certifications relevant to the role; preferred offensive certifications include OSCP, OSEP, CRTO, GXPN (or equivalent).
• Demonstrate strong hands on expertise in enterprise networks, Windows, Active Directory, and identity based attacks.
• Demonstrate advanced understanding of adversarial tactics, techniques, and procedures (TTPs).
• Strong understanding of IT network architecture and cyber security fundamentals, enabling effective guidance for product enhancements and new designs.

Responsibilities

• Lead and execute full scope Red Team engagements and adversary emulation campaigns across network, identity, cloud, and human attack surfaces.
• Plan and manage Red Team operations, including scope definition, objectives, rules of engagement, operational constraints, and deconfliction.
• Design and execute campaign style attack chains using adversary tactics, techniques, and procedures (TTPs), including assumed breach and stealth intrusion scenarios.
• Perform and oversee advanced exploitation of enterprise networks, systems, Windows/Active Directory, identity systems, and cloud services.
• Evaluate and assess preventive and detective controls (e.g., EDR, SIEM, IAM, NAC) by analyzing telemetry and validating alerting/response workflows.
• Collaborate with Detection, Response, and Purple Team partners during live fire and validation exercises.
• Identify systemic control gaps and end to end attack paths (not just isolated vulnerabilities) and translate business drivers into technical recommendations.
• Administer, coordinate, and implement vendor and OCO testing processes, ensuring adherence to procedures, policies, and regulatory frameworks.
• Guide cyber security decisions related to network design, cloud adoption, threat modeling, and new technology integration; evolve processes, automation, and monitoring using data analytics.
• Oversee evidence collection, attack chain documentation, and artifact management; produce clear, executive ready reports that communicate risk and recommendations to technical and non technical stakeholders.
• Mentor, coach, and develop Red Team operators in tooling, tradecraft, and operational discipline; contribute to labs, tools, and training programs.
• Maintain relationships with partners across IT, business units, BISOs, ERMs, and other teams to ensure alignment and effective coordination; partner with leadership to shape Red Team strategy, maturity, and capability development.
• Monitor industry trends, business developments, and emerging threat actor techniques to continuously mature the OCO program and methodologies.
• Manage risk through procedural adherence, rapid issue resolution, and proper escalation and documentation of findings.

Skills

Penetration Testing

Red Teaming

Networking

Firewalls

Server Administration

Encryption

Cloud

Containers

Databases

Software Development

Tools

Nessus

Burp Suite

Metasploit

Nmap

Job description

WorkNovas LLC is seeking an Offensive Cyber Operations Lead in Tampa. Hybrid role with responsibilities spanning red team engagements, adversary emulation, and cross‑functional collaboration to improve detection, response, and resilience.

You will drive end‑to‑end assessment methodologies, tool selection, and reporting to executive stakeholders. The ideal candidate has 7+ years in offensive security, strong hands‑on expertise in multiple domains, and professional certifications.