The Role
Conduct full-scope red team engagements across network, application, cloud, social engineering, and physical attack vectors. Simulate advanced adversaries using MITRE ATT&CK, exploit vulnerabilities, develop tools and payloads, perform evasion and lateral movement, and collaborate with Blue and Purple Teams. Produce executive and technical reports, communicate business risks, and remain current on attacker techniques, APT campaigns, and security research.
Summary Generated by Built In
Job Description – Red Team Consultant / Senior Consultant
Role Overview
We are looking for passionate and highly skilled Red Team professionals to join our offensive security team. The role involves simulating advanced adversary techniques to assess, challenge, and strengthen the security posture of our clients. You will plan, execute, and report on Red Team engagements covering network, application, cloud, social engineering, and physical vectors.
Key Responsibilities
Conduct full-scope Red Team engagements simulating real-world adversaries.
Perform adversary emulation using techniques aligned with MITRE ATT&CK.
Identify, exploit, and escalate vulnerabilities across applications, infrastructure, and cloud environments.
Develop and execute phishing/social engineering campaigns.
Design and carry out lateral movement, privilege escalation, persistence, and data exfiltration scenarios.
Research and develop custom tools, scripts, and payloads to support operations.
Collaborate with the Blue Team/Purple Team for detection engineering and defensive improvements.
Document and present findings in executive and technical reports with clear risk/business impact.
Stay updated with the latest TTPs, APT campaigns, and security research.
Required Skills & Experience
3–7 years of experience in penetration testing / offensive security / Red Teaming.
Strong knowledge of network protocols, Active Directory attacks, and cloud security (AWS, Azure, GCP).
Proficiency in exploit development, scripting (Python, PowerShell, Bash), and tool customization.
Hands-on with tools like Cobalt Strike, Metasploit, Empire, Covenant, Sliver, Veil, Mimikatz, BloodHound, etc.
Experience with Evasion techniques (AV/EDR bypass, obfuscation, payload delivery).
Familiarity with forensic artefacts and ability to simulate stealthy attacker behavior.
Excellent problem-solving skills and an attacker’s mindset.
Good communication skills for both technical and non-technical audiences.
Preferred / Nice-to-Have
Relevant certifications: OSCP, CRTO, OSEP, OSCE, CRTP, CRTE, CISSP (offensive track).
Experience in physical Red Team assessments.
Experience with custom malware development or adversary simulation frameworks.
Contribution to open-source tools, security research, or publications.
Skills Required
- 3-7 years of experience in penetration testing, offensive security, or red teaming
- Strong knowledge of network protocols and Active Directory attacks
- Cloud security experience with AWS, Azure, and GCP
- Proficiency in exploit development and scripting with Python, PowerShell, and Bash
- Experience customizing offensive security tools and using Cobalt Strike, Metasploit, Empire, Covenant, Sliver, Veil, Mimikatz, and BloodHound
- Experience with AV/EDR evasion, obfuscation, and payload delivery
- Familiarity with forensic artifacts and stealthy attacker behavior
- Excellent problem-solving skills and an attacker mindset
- Good communication skills for technical and non-technical audiences
- OSCP, CRTO, OSEP, OSCE, CRTP, or CISSP offensive-track certification
- Experience conducting physical red team assessments
- Experience with custom malware development or adversary simulation frameworks
- Contributions to open-source tools, security research, or publications
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Infosec is a cybersecurity education company that helps IT and security professionals advance their careers and helps employees become safer online at work and home. Its offerings include Infosec Skills, with more than 1,400 hands-on cybersecurity courses and instructor-led certification boot camps, and Infosec IQ, which provides security-awareness training. Its mission is to equip individuals and organizations to outsmart cybercrime.
