Senior Red Team Operator — Adversary Emulation & Pen Tests

Relha LLC; Northern (KY); Hybrid; USD 119,000 - 198,000; Full time

Job summary

Deloitte is seeking a Security Engineer III, Red Team Operator (TS clearance) to simulate adversary techniques and improve detection, response, and resilience across client environments. The role demands offensive security expertise, strong reporting, and the ability to operate on complex systems.

Responsibilities include planning red team ops, emulating attackers, and delivering actionable after-action findings.

Qualifications

• Bachelor’s degree in cybersecurity, CS, information systems, engineering, or related field.
• Onsite work up to 5 days per week.
• 2+ years experience in red teaming, purple teaming, or adversary simulation.
• Strong knowledge of Windows/AD, Linux, cloud, and identity environments.
• Experience with offensive security tooling and reporting.

Responsibilities

• Plan and execute red team operations against enterprise environments and applications.
• Emulate threat actors with realistic attack paths and techniques.
• Conduct reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration simulations.
• Assess effectiveness of security controls, monitoring, and incident response.
• Perform phishing and social engineering exercises where authorized.
• Develop custom payloads, scripts, and attack workflows.
• Document findings, gaps, and remediation recommendations.
• Deliver clear after-action reports to stakeholders.
• Collaborate with blue teams and security leadership to improve defenses.

Skills

Red Teaming

Offensive security

Threat emulation

Team leadership

Reporting

Cobalt Strike

PowerShell

Python

Metasploit

Nmap

Burp Suite

Education

Bachelor’s degree in Cybersecurity/CS/IS/Engineering

Tools

Cobalt Strike

Mythic

Metasploit

BloodHound

Burp Suite

Nmap

PowerShell

Python

Job description

Deloitte is seeking a Security Engineer III, Red Team Operator (TS clearance) to simulate adversary techniques and improve detection, response, and resilience across client environments. The role demands offensive security expertise, strong reporting, and the ability to operate on complex systems.

Responsibilities include planning red team ops, emulating attackers, and delivering actionable after-action findings.