Senior Red Team Operator

U.S. Bank; Englewood (CO); Hybrid; USD 133,365 - 156,900; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

401(k) and employer‑funded retirement

Paid vacation and holidays

Parental leave

Sick and Safe Leave

Job summary

U.S. Bank is seeking a Senior Red Team Operator to lead advanced offensive security operations, threat emulation, and adversarial simulations across enterprise environments.

You will mentor staff, develop custom capabilities, and partner with security teams to strengthen detection, response, and risk management. You will design multi‑stage attack scenarios, craft exploitable payloads, and deliver executive reports with remediation recommendations.

Qualifications

• Bachelor's degree or equivalent experience.
• 8+ years information security experience.
• Experience leading Red Team engagements, threat emulation exercises, and adversarial simulations.
• Advanced exploit development, payload creation, and attack automation.
• Proficiency with offensive frameworks such as Cobalt Strike, Metasploit, Mythic, Sliver.
• Strong programming in Python, PowerShell, C/C++, Go, and Shell.

Responsibilities

• Lead threat emulation and adversarial simulations that replicate sophisticated threat actors.
• Develop custom tools, payloads, exploits, and automation to support Red Team ops.
• Research emerging threats and attacker methodologies to enhance team capabilities.
• Design multi-stage attack scenarios to test security controls and incident response.
• Produce executive and technical reports documenting attack chains and risk remediation.
• Mentor junior Red Team operators and drive best practices.

Skills

Threat emulation

Red Team leadership

Offensive tooling

Python

PowerShell

C/C++

Go

Shell scripting

Cloud security

IaC

Education

Bachelor's degree or equivalent

Tools

Cobalt Strike

Metasploit

Mythic

Sliver

Job description

At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One.

Job Description

The Senior Red Team Operator leads advanced offensive security operations designed to assess and improve the organization's cyber resilience. This role is responsible for conducting sophisticated threat emulation exercises, adversarial simulations, and offensive security assessments across enterprise systems, applications, cloud environments, and physical security domains. The Senior Red Team Operator serves as a technical leader and subject matter expert, driving innovation in offensive security tradecraft, developing custom capabilities, mentoring team members, and partnering with security and business stakeholders to strengthen detection, response, and risk management capabilities.

Key Responsibilities

• Lead and execute advanced threat emulation, Red Team, and adversarial simulation exercises that replicate sophisticated threat actors.
• Conduct offensive security assessments against enterprise networks, applications, cloud platforms, infrastructure, and physical security controls.
• Develop custom tools, payloads, exploits, and automation capabilities to support complex Red Team operations.
• Research emerging threats, attacker methodologies, and offensive security techniques to continuously enhance team capabilities.
• Design and execute multi‑stage attack scenarios that assess the effectiveness of security controls, monitoring capabilities, and incident response processes.
• Produce executive and technical reporting that clearly documents attack chains, business impact, risk severity, and remediation recommendations.
• Serve as a trusted advisor and subject matter expert to security operations, detection engineering, threat hunting, and technology teams.
• Lead purple team engagements to validate detection coverage and improve defensive capabilities.
• Mentor and develop junior Red Team operators while contributing to operational standards, methodologies, and best practices.
• Drive continuous improvement initiatives through automation, process optimization, and capability development.

Basic Qualifications

• Bachelors degree or equivalent experience
• 8+ years experience in information security

Preferred Qualifications

• Seven or more years of experience in information security, including significant experience in offensive security, penetration testing, or Red Team operations.
• Demonstrated experience leading Red Team engagements, threat emulation exercises, and adversarial simulations within complex enterprise environments.
• Advanced expertise in exploit development, custom payload creation, offensive tooling development, and attack automation.
• Extensive experience with industry-standard offensive security and command‑and‑control frameworks such as Cobalt Strike, Metasploit, Mythic, Sliver, and similar platforms.
• Proven ability to bypass, evaluate, and assess modern security technologies including EDR, XDR, endpoint protection, and network‑based controls.
• Strong proficiency in multiple programming and scripting languages including Python, PowerShell, C/C++, C#, Go, and Shell scripting.
• Deep understanding of enterprise architecture, cloud technologies, application security, network security, identity systems, and emerging cyber threats.
• Experience performing purple team activities and partnering with defensive teams to improve detection and response capabilities.
• Experience leveraging Infrastructure as Code (IaC), automation frameworks, and cloud‑native technologies.
• Proven ability to identify complex vulnerabilities, develop innovative attack paths, and create proof‑of‑concept exploits that demonstrate business risk.
• Excellent communication and presentation skills with the ability to translate highly technical concepts into actionable recommendations for senior leadership and executive stakeholders.
• Demonstrated ability to lead complex offensive security initiatives, influence strategic security decisions, and drive measurable improvements to the organization's security posture.

This role requires working from a U.S. Bank location three (3) or more days per week.

Benefits

• Healthcare (medical, dental, vision)
• Basic term and optional term life insurance
• Short‑term and long‑term disability
• Pregnancy disability and parental leave
• 401(k) and employer‑funded retirement plan
• Paid vacation (from two to five weeks depending on salary grade and tenure)
• Up to 11 paid holiday opportunities
• Adoption assistance
• Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law

Review our full benefits available by employment status here.

U.S. Bank is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law.

E‑Verify

U.S. Bank participates in the U.S. Department of Homeland Security E‑Verify program in all facilities located in the United States and certain U.S. territories. The E‑Verify program is an Internet‑based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services. Learn more about the E‑Verify program.

The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, U.S. Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401(k) contribution and pension (all benefits are subject to eligibility requirements). Pay Range: $133,365.00 - $156,900.00

U.S. Bank will consider qualified applicants with arrest or conviction records for employment. U.S. Bank conducts background checks consistent with applicable local laws, including the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act as well as the San Francisco Fair Chance Ordinance. U.S. Bank is subject to, and conducts background checks consistent with the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA). In addition, certain positions may also be subject to the requirements of FINRA, NMLS registration, Reg Z, Reg G, OFAC, the NFA, the FCPA, the Bank Secrecy Act, the SAFE Act, and/or federal guidelines applicable to an agreement, such as those related to ethics, safety, or operational procedures.

Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies.

Posting may be closed earlier due to high volume of applicants.