Senior Red Team Engineer

OffSeq; Stati Uniti; Remoto; USD 150.000 - 210.000; Tempo pieno

Descrizione del lavoro

OffSeq is seeking an experienced Lead Red Team Engineer to orchestrate objective-based engagements across enterprise and cloud environments. You will plan, execute, and debrief covert assessments, building practical guidance for technical teams and executives.

You will emulate adversaries in Windows, Linux, AD, Azure, AWS or GCP, develop tools in C#, Python, PowerShell or Go, and mentor a team of penetration testers while advancing red team methodologies.

Competenze

• Minimum five years of offensive security experience.
• Two or more years leading objective-based red team operations.
• Deep knowledge of Active Directory attack paths, cloud abuse and post-exploitation techniques.

Mansioni

• Plan and lead covert red team operations, including scoping, rules of engagement, execution and debriefing.
• Emulate adversaries across Windows, Linux, Active Directory and cloud environments, building realistic attack paths from weaknesses.
• Develop custom tools, payloads and command-and-control infrastructure to assess defensive systems such as EDR and SIEM.
• Conduct social engineering and physical intrusion activities when permitted by the engagement scope.
• Produce clear reports and brief engineers and executives on risks and actions.
• Mentor penetration testers and improve team methods using lessons from field work.

Conoscenze

Red team leadership

Threat emulation

Adversary simulations

English communication

Formazione

OSCP or equivalent

Strumenti

Cobalt Strike

Mythic

BloodHound

PowerShell

Go

Python

C#

Descrizione del lavoro

Role overview

Lead objective-based red team engagements that assess how well organizations can withstand realistic attacks. The work spans enterprise and cloud systems as well as social and physical attack vectors, with findings turned into practical guidance for technical teams and senior leaders.

Responsibilities

• Plan and lead covert red team operations, including scoping, rules of engagement, execution and debriefing.
• Emulate adversaries across Windows, Linux, Active Directory and Azure, AWS or GCP environments, building realistic attack paths from weaknesses.
• Develop custom tools, payloads and command-and-control infrastructure to assess defensive systems such as EDR and SIEM.
• Conduct social engineering and physical intrusion activities when permitted by the engagement scope.
• Produce clear reports and brief engineers and executives on risks and actions.
• Mentor penetration testers and improve team methods using lessons from field work.

Requirements

• At least five years of offensive security experience, including two or more years leading objective-based red team operations.
• Deep knowledge of Active Directory attack paths, cloud abuse and post-exploitation techniques.
• Ability to develop tools in C#, Python, PowerShell or Go.
• Practical experience with Cobalt Strike, Mythic, BloodHound or comparable offensive security frameworks and tools.
• OSCP, OSEP, CRTO-level certification or equivalent demonstrable ability.
• Strong spoken and written English.

Nice to have

• Latvian language skills.
• OT/ICS security or exploit development experience.
• Published tools or CVEs.
• Experience in NATO or EU classified environments.