Senior Red Team Operator — Adversary Emulation Expert

Covington & Burling LLP; Boston (MA); On-site; USD 120,000 - 189,000; Full time

Job summary

Covington & Burling LLP is seeking a senior cybersecurity professional with 6–10 years of offensive security, penetration testing, and red team experience to strengthen enterprise defenses across endpoints, applications, and cloud services.

You will validate findings, collaborate with VM, SOC, and IT operations, and apply advanced vulnerability management practices, including AI-assisted tooling, to prioritize remediation in a remote-friendly, legally-focused environment.

Qualifications

• 6–10 years of offensive security, pentesting, red teaming, exposure management, and/or advanced vulnerability management experience.
• Hands-on pentesting/red team experiences across enterprise environments and cloud services.
• Proficiency with web/API/cloud/infrastructure/mobile/ thick-client testing using industry-standard tools.
• Experience leveraging AI-powered tools for exploitation and reporting.

Responsibilities

• Conduct penetration testing, red team activities, and adversary emulation across endpoints, servers, identity platforms, applications, and cloud services.
• Validate vulnerabilities identified through automated scanning to determine exploitability and real-world impact.
• Collaborate with VM, SOC, and IT operations to improve assessment quality and remediation prioritization.
• Document findings clearly with business impact and remediation steps.

Skills

Offensive security

Penetration testing

Red teaming

Exposure management

Vulnerability management

Education

Bachelor's degree in CS/Cybersecurity

Tools

Burp Suite

Nmap

Metasploit

Job description

Covington & Burling LLP is seeking a senior cybersecurity professional with 6–10 years of offensive security, penetration testing, and red team experience to strengthen enterprise defenses across endpoints, applications, and cloud services.

You will validate findings, collaborate with VM, SOC, and IT operations, and apply advanced vulnerability management practices, including AI-assisted tooling, to prioritize remediation in a remote-friendly, legally-focused environment.