Senior Red Team Operator: Offensive Security Lead

US Bank; Minneapolis (MN); Hybrid; USD 150,000 - 210,000; Full time

Job summary

U.S. Bank is seeking a Senior Red Team Operator to lead advanced offensive security efforts, including threat emulation exercises, adversarial simulations, and enterprise-wide assessments.

You will develop custom capabilities and mentor team members to strengthen detection, response, and risk management across cloud, on‑premise, and hybrid environments. The role requires deep expertise in exploit development, tooling, and automation, with strong communication skills to convey complex findings to

Qualifications

• Bachelor's degree or equivalent experience.
• 8+ years in information security.
• Experience leading Red Team engagements, threat emulation, and adversarial simulations.
• Advanced exploit development, payload creation, and automation.
• Experience with offensive security frameworks and cloud security.
• Excellent communication to senior leadership and executives.

Responsibilities

• Lead threat emulation, Red Team, and adversarial simulations replicating sophisticated threat actors.
• Develop custom tools, payloads, exploits, and automation to support Red Team ops.
• Research emerging threats and attacker methodologies to enhance capabilities.
• Design multi-stage attack scenarios evaluating controls, monitoring, and incident response.
• Produce executive and technical reports detailing attack chains, impact, risk, and remediation.
• Mentor junior Red Team operators and strengthen best practices.
• Drive automation and capability development across the team.

Skills

Threat emulation

Adversarial simulations

Attack automation

Executive communication

Mentoring junior staff

Education

Bachelor's degree or equivalent experience

Tools

Cobalt Strike

Metasploit

Mythic

Sliver

Job description

U.S. Bank is seeking a Senior Red Team Operator to lead advanced offensive security efforts, including threat emulation exercises, adversarial simulations, and enterprise-wide assessments.

You will develop custom capabilities and mentor team members to strengthen detection, response, and risk management across cloud, on‑premise, and hybrid environments. The role requires deep expertise in exploit development, tooling, and automation, with strong communication skills to convey complex findings to