Senior Red Team Operator

Lowe's; Charlotte (NC); On-site; USD 120,000 - 170,000; Full time

Job summary

Lowe’s is seeking a highly skilled Red Team Operator to plan and execute authorized, threat-informed offensive security across Lowe’s enterprise, cloud, and retail tech environments. You will emulate adversaries, develop and test tooling, and collaborate with SOC and incident response teams.

The role emphasizes AD, cloud IAM, Kerberos, and Active Directory attack paths, with a strong focus on detection gaps, remediation, and MITRE ATT&CK mappings. A senior security mindset is essential.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, or related field.
• 4+ years of information security experience.

Responsibilities

• Plan, scope, and execute authorized red team operations across enterprise and cloud environments.
• Design, deploy, and operate C2 infrastructure for red team activities.
• Translate findings into technical reports and remediation recommendations.
• Collaborate with Detection Engineering, SOC, Threat Hunting, and IR teams to improve coverage.
• Maintain operational security practices across tooling and payloads.
• Mentor team members and develop repeatable offensive security methodologies.

Skills

Red team operations

Threat emulation

Programming knowledge

Education

Bachelor’s degree in computer science or related field

Tools

C2 infrastructure

EDR/SIEM basics

Job description

Lowe’s is seeking a highly skilled Red Team Operator to plan and execute authorized, threat-informed offensive security across Lowe’s enterprise, cloud, and retail tech environments. You will emulate adversaries, develop and test tooling, and collaborate with SOC and incident response teams.

The role emphasizes AD, cloud IAM, Kerberos, and Active Directory attack paths, with a strong focus on detection gaps, remediation, and MITRE ATT&CK mappings. A senior security mindset is essential.