Senior Red Team Lead - Adversary Emulation & Offense

U.S. Bank; Atlanta (GA); Hybrid; USD 133,000 - 157,000; Full time

Benefits offered by this job

Healthcare

401(k) plan

Paid vacation

Disability insurance

Job summary

U.S. Bank is seeking a Senior Red Team Operator to lead advanced offensive security operations, including threat emulation exercises and adversarial simulations across enterprise systems, cloud, and physical security domains.

The role involves mentoring junior operators, developing custom capabilities, and partnering with security and business stakeholders to strengthen detection, response, and risk management capabilities.

Qualifications

• Bachelor's degree or equivalent experience.
• 8+ years of information security experience.
• Significant experience in offensive security, penetration testing, or Red Team operations.
• Experience leading Red Team engagements, threat emulation exercises, and adversarial simulations.

Responsibilities

• Lead and execute advanced threat emulation and adversarial simulations.
• Conduct offensive security assessments across networks, applications, cloud, and physical controls.
• Develop custom tools, payloads, and automation for Red Team operations.
• Research emerging threats and attacker methodologies to enhance capabilities.
• Design multi-stage attack scenarios to test security controls and incident response.
• Produce executive and technical reports documenting attack chains, risk, and remediation.

Skills

Threat emulation

Red Team operations

Offensive security

Python scripting

PowerShell scripting

Education

Bachelor's degree or equivalent experience

Tools

Cobalt Strike

Metasploit

Mythic

Sliver

Job description

U.S. Bank is seeking a Senior Red Team Operator to lead advanced offensive security operations, including threat emulation exercises and adversarial simulations across enterprise systems, cloud, and physical security domains.

The role involves mentoring junior operators, developing custom capabilities, and partnering with security and business stakeholders to strengthen detection, response, and risk management capabilities.