Senior Red Team Operator — Offensive Security

Kroll; United States; Hybrid; USD 110,000 - 150,000; Full time

Job summary

Kroll is seeking a Senior Consultant, Red Team Operator to expand our offensive security capabilities. You will lead complex red team, purple team, and adversary emulation engagements across multiple sectors, working with clients to define objectives, attack paths, and engagement rules.

Responsibilities include executing tests across AD, cloud platforms, and hybrid environments, building red team infrastructure, and providing actionable remediation guidance.

Qualifications

• 5+ years in offensive cybersecurity, including red/purple team engagements.
• Experience with Windows enterprise environments and AD exploitation.
• Experience with social engineering in red team operations.
• Experience operating command-and-control frameworks such as Mythic or Cobalt Strike.
• Knowledge of evasion techniques and detection-aware tradecraft.
• Excellent written and verbal communication skills for technical and non-technical audiences.

Responsibilities

• Deliver red team, purple team, assumed-breach, and adversary emulation engagements for clients across multiple sectors
• Support engagement planning, including threat-informed scenarios, attack objectives, rules of engagement, and success criteria
• Execute hands-on offensive activity across enterprise environments, including AD exploitation, credential access, privilege escalation, lateral movement, and objective-based testing
• Assess and exploit attack paths across Entra ID, Microsoft 365, hybrid identity environments, AWS, Azure, GCP, and other cloud platforms
• Build, adapt, and operate red team infrastructure, tooling, payloads, and scripts during engagements
• Apply detection-aware tradecraft and understand how EDR, SIEM, identity protection, conditional access, email security, and network monitoring affect operations
• Produce clear, evidence-based reporting that explains attack paths, business impact, and remediation actions
• Present technical findings to security teams and communicate risk to senior stakeholders
• Mentor junior consultants and support quality assurance
• Collaborate with wider Cyber Risk teams, including incident response and threat intelligence

Skills

Red Team Operations

Adversary Emulation

Social Engineering

Cobalt Strike

Threat Modeling

Tooling Development

Tools

Mythic

Cobalt Strike

Job description

Kroll is seeking a Senior Consultant, Red Team Operator to expand our offensive security capabilities. You will lead complex red team, purple team, and adversary emulation engagements across multiple sectors, working with clients to define objectives, attack paths, and engagement rules.

Responsibilities include executing tests across AD, cloud platforms, and hybrid environments, building red team infrastructure, and providing actionable remediation guidance.