Senior Red Team Operator — Offensive Security Expert

RiseMe; United States; Remote; USD 110,000 - 150,000; Full time

Job summary

Kroll is seeking a Senior Consultant / L3 Red Team Operator in the United States to lead offensive security engagements across enterprise networks, AD, clouds, and identity platforms. You will define objectives, develop attack paths, and perform authorised, risk-aware testing with cross-team collaboration.

You will leverage tools like Mythic and Cobalt Strike, conduct social engineering where permitted, and deliver detailed, actionable remediation guidance to clients and senior stakeholders.

Qualifications

• 5+ years in offensive cybersecurity; experience delivering red team, purple team, adversary emulation, or assumed-breach engagements.
• Strong experience with Windows enterprise environments, AD exploitation, privilege escalation, and lateral movement.
• Comfort with social engineering techniques in support of red team operations (email and voice phishing).
• Experience with command-and-control frameworks such as Mythic, Cobalt Strike, or similar tooling.

Responsibilities

• Deliver red team, purple team, assumed-breach, and adversary emulation engagements for clients across sectors.
• Define realistic attack objectives and execute authorised offensive security activities.
• Assess attack paths across Microsoft Entra ID, Microsoft 365, hybrid identity, and cloud platforms.
• Build and operate red team infrastructure, tooling, and payloads for engagements.
• Produce clear, evidence-based reporting of attack paths, business impact, and remediation actions.
• Present technical findings to security teams and stakeholders; mentor junior consultants.

Skills

Red team

Purple team

Adversary emulation

Assumed-breach

Social engineering

Cobalt Strike

Mythic

Python

PowerShell

C/C++

Networking basics

Windows AD

Tools

Mythic

Cobalt Strike

PowerShell

Python

JavaScript

Job description

Kroll is seeking a Senior Consultant / L3 Red Team Operator in the United States to lead offensive security engagements across enterprise networks, AD, clouds, and identity platforms. You will define objectives, develop attack paths, and perform authorised, risk-aware testing with cross-team collaboration.

You will leverage tools like Mythic and Cobalt Strike, conduct social engineering where permitted, and deliver detailed, actionable remediation guidance to clients and senior stakeholders.