Key Responsibilities
- Plan and deliver red team operations, adversary emulation exercises and advanced penetration testing engagements.
- Execute offensive techniques including initial access, privilege escalation, lateral movement and persistence.
- Develop and maintain offensive tooling, payloads and command-and-control infrastructure.
- Apply techniques involving EDR evasion, operational security and exploitation across on-premise and cloud environments.
- Conduct technical research into emerging threats, vulnerabilities and exploitation techniques.
- Produce clear technical reports, communicate findings and provide actionable recommendations.
- Contribute to the development and improvement of red team capabilities, tools and methodologies.
Skills & Experience
- Strong hands-on experience in red teaming, adversary simulation or advanced penetration testing.
- Good understanding of Windows, Linux, Active Directory, networking and cloud environments.
- Experience with offensive security tools and frameworks such as Cobalt Strike, Sliver, Metasploit or similar.
- Scripting or development experience in Python, C#, PowerShell, Go, Rust or similar languages.
- Knowledge of MITRE ATT&CK, attacker tradecraft, detection evasion and operational security.
- Ability to deliver technical engagements independently and communicate effectively with stakeholders.
- Relevant certifications such as CRTO, RTO2, OSCP, OSEP, OSED, OSCE or CREST CCT would be advantageous, although equivalent practical experience will be considered.
IR35 Status:
Not specified