Senior Red Team Operator: Offensive Security Lead

Exxon Mobil; Spring (TX); On-site; USD 140,000 - 230,000; Full time

Benefits offered by this job

Pension Plan

Savings Plan

Workplace Flexibility

Medical, dental, vision plans

Wellbeing programs

Job summary

ExxonMobil is seeking a Senior Red Team Operator to lead offensive security operations, simulate real-world cyber threats, and improve detection and response capabilities across on‑premise and cloud environments.

You will conduct advanced penetration testing, collaborate with Blue Teams, and educate stakeholders on threat tactics and mitigation strategies. A strong background in AD, Windows, Linux, and cloud security is required.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 5+ years in offensive security, red teaming, or penetration testing.
• Demonstrated proficiency in penetration testing tools.
• Deep understanding of MITRE ATT&CK, Cyber Kill Chain, and threat actor TTPs.
• 3+ years experience with cloud platforms (AWS, Azure, GCP) and associated security controls.
• Demonstrated proficiency with Python, Bash, PowerShell, C/C++, or Java.

Responsibilities

• Plan and execute red team engagements simulating advanced threats.
• Conduct full exploitation across Active Directory, Windows, Linux, and cloud environments.
• Perform risk assessments and vulnerability analyses on enterprise systems.
• Document findings and deliver actionable remediation reports.

Skills

Penetration testing

Red teaming

Cloud security

MITRE ATT&CK

Python/Bash/PowerShell

C/C++/Java

Education

Bachelor's degree in Computer Science or related field

Tools

Vulnerability assessment tools

Cloud security tools

Job description

ExxonMobil is seeking a Senior Red Team Operator to lead offensive security operations, simulate real-world cyber threats, and improve detection and response capabilities across on‑premise and cloud environments.

You will conduct advanced penetration testing, collaborate with Blue Teams, and educate stakeholders on threat tactics and mitigation strategies. A strong background in AD, Windows, Linux, and cloud security is required.