Senior Red Team Operator | Offensive Security Expert

Relha LLC; Baltimore (MD); Hybrid; USD 119,000 - 198,000; Full time

Job summary

Deloitte's Cyber Defense & Resilience team seeks a Security Engineer III, Red Team Operator, to emulate adversaries, test defenses, and improve detection and response capabilities. You will plan and execute red team engagements across enterprise environments, networks, and cloud platforms while reporting findings to leadership.

The role requires a strong offensive security background, reporting discipline, and the ability to obtain and maintain required US clearance.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
• Ability to work onsite up to 5 days a week.
• 2+ years of experience in offensive security including red teaming, purple teaming, or adversary simulation.
• Knowledge of enterprise attack techniques across Windows, AD, Linux, cloud, and identity environments.
• Experience with command and control frameworks, privilege escalation, lateral movement, and evasion techniques.
• Proficiency with tools such as Cobalt Strike, Mythic, Metasploit, BloodHound, Burp Suite, Nmap, and PowerShell or Python.
• Experience with MITRE ATT&CK mapping and threat emulation.
• CRTO or OSCP certification.
• Willingness to travel 20% on average.

Responsibilities

• Plan and execute red team operations against enterprise environments, web apps, cloud, and endpoints.
• Emulate advanced threat actors using realistic attack paths, tools, and techniques.
• Conduct reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration simulations.
• Assess the effectiveness of security controls, monitoring, and incident response processes.
• Perform phishing, social engineering, and credential attack exercises where authorized.
• Develop custom payloads, scripts, and attack workflows to support engagements.
• Document findings, attack chains, gaps in defenses, and remediation recommendations.
• Deliver clear after-action reports and debriefs to technical and leadership stakeholders.
• Collaborate with blue teams, detection engineers, and security leadership to improve defensive capabilities.

Skills

Team collaboration

Strong communication

Leadership

Time management

Detail oriented

Independent work

Travel willingness

Report writing

Adversary emulation

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field

CRTO or OSCP certification

Tools

Cobalt Strike

Mythic

Metasploit

BloodHound

Burp Suite

Nmap

PowerShell

Python

Job description

Deloitte's Cyber Defense & Resilience team seeks a Security Engineer III, Red Team Operator, to emulate adversaries, test defenses, and improve detection and response capabilities. You will plan and execute red team engagements across enterprise environments, networks, and cloud platforms while reporting findings to leadership.

The role requires a strong offensive security background, reporting discipline, and the ability to obtain and maintain required US clearance.