Senior Red Team Lead — Global Operations (Remote)

Deloitte France; Washington (District of Columbia); Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Fully remote

Job summary

Deloitte Global is seeking a seasoned Red Team Lead to direct and execute global engagements, mentor team members, and advance covert toolchains and C2 infrastructure. You will drive risk-aware assessments, ensure engagement quality, and document findings for deconfliction and knowledge sharing.

Ideal candidates have 3+ years leading Red Team work, deep TTP knowledge, and hands-on experience with AD/Azure EntraID, malware techniques, and industry tools.

Qualifications

• 3+ years of Red Team experience.
• Experience with threat actor TTPs across diverse targets.
• Experience with digital forensics and incident response capabilities.
• Experience leading Red Team operations against companies and their people, processes, and technologies.
• Ability to create, update, and maintain Red Team documentation.
• Experience enumerating and attacking Windows AD and Azure EntraID.
• Experience building covert C2 infrastructure in cloud environments. Automation a plus.
• Experience with modern malware development and obfuscation techniques.
• Deep understanding of enterprise security architecture and monitoring/IOC implications.
• Hands-on experience with Red Team tools like Cobalt Strike, Nighthawk C2, BloodHound, Evilginx2.

Responsibilities

• Leading a small team of Red Team Operators in planning, execution, and reporting of Red Team engagements.
• Moving stealthily within target networks to satisfy campaign objectives while remaining undetected.
• Establishing persistence and tuning long-haul beacons for long-term footholds.
• Ensuring adherence to the Rules of Engagement and operational oversight of actions.
• Maintaining in-depth documentation and auditing of actions for deconfliction and non-repudiation.
• Identifying opportunities to mentor other Red Team members.
• Assisting in Red Team Attack Network management and tool adoption.
• Sharing research within Deloitte Global Red Team and broader security orgs.

Skills

Red Team experience

Threat actor TTPs

Digital forensics & IR

Leading Red Team operations

Documentation & governance

AD / Azure EntraID

Covert C2 infrastructure

Malware development

Security architecture

IOC/detections understanding

Red Team tools expertise

Tools

Cobalt Strike

Nighthawk C2

BloodHound

EvilGinx2

Job description

Deloitte Global is seeking a seasoned Red Team Lead to direct and execute global engagements, mentor team members, and advance covert toolchains and C2 infrastructure. You will drive risk-aware assessments, ensure engagement quality, and document findings for deconfliction and knowledge sharing.

Ideal candidates have 3+ years leading Red Team work, deep TTP knowledge, and hands-on experience with AD/Azure EntraID, malware techniques, and industry tools.