Senior Red Team Lead — Remote Global Engagements

Deloitte France; Indianapolis (IN); Remote; USD 140,000 - 230,000; Full time

Job summary

Deloitte Global is seeking a seasoned Red Team Operator to lead a small team in global engagements. You will plan, execute, and report red team activities, perform intelligence gathering, and develop covert C2 infrastructure while ensuring engagement governance.

Ideal candidates bring 3+ years of Red Team experience, deep TTP knowledge, and experience with Windows AD/Azure EntraID, malware techniques, and cloud tooling. Remote work options are available.

Qualifications

• 3+ years of Red Team experience.
• Deep understanding of threat actor TTPs.
• Experience with forensics and incident response capabilities.
• Experience leading Red Team operations against companies and their people, processes, and technologies.
• Ability to create, update, and maintain Red Team documentation.
• Experience enumerating and attacking Windows AD and Azure EntraID environments.
• Experience building covert C2 infrastructure in cloud platforms. Automation a plus.
• Experience with modern malware development and obfuscation techniques.
• Deep understanding of enterprise security architecture and security controls.
• Understanding monitoring and IOC implications for covert Red Team operations.
• Hands-on experience with Red Team tools: Cobalt Strike, Nighthawk C2, BloodHound, Evilginx2.

Responsibilities

• Lead a team of Red Team Operators in planning, execution, and reporting of engagements.
• Perform intelligence gathering on targets worldwide.
• Develop covert C2 and malware techniques.
• Maintain logs, governance, and deconfliction artifacts.
• Mentor team members and share research within the Deloitte Global Red Team.
• Advance attack methodologies and field manuals for ongoing engagements.
• Collaborate with security teams to reduce global risk.

Skills

Red Team operations

Threat TTPs

Forensics & IR

Documentation

AD/Azure EntraID

C2 infrastructure

Malware techniques

Security architecture

IOC & monitoring

Red Team tools (Cobalt Strike)

Education

OSCP

OSCE

OSEP

OSED

OSEE

CRTP

CRTE

Tools

Cobalt Strike

Nighthawk C2

BloodHound

Evilginx2

Ansible

Terraform

Job description

Deloitte Global is seeking a seasoned Red Team Operator to lead a small team in global engagements. You will plan, execute, and report red team activities, perform intelligence gathering, and develop covert C2 infrastructure while ensuring engagement governance.

Ideal candidates bring 3+ years of Red Team experience, deep TTP knowledge, and experience with Windows AD/Azure EntraID, malware techniques, and cloud tooling. Remote work options are available.