Senior Red Team & Offensive Security Consultant

About the Job

Senior hands-on offensive security professional responsible for delivering complex, objective-driven Red Team and Adversary Simulation engagements for local and global clients.

The role combines deep technical execution with the ability to independently take ownership of Red Team projects, including threat-informed adversary emulation, covert Red Team operations, Purple Team exercises, attack path analysis, and advanced penetration testing across enterprise, macOS, Windows, web applications, AI/LLM-enabled applications, cloud, identity, and hybrid environments.

The position requires strong offensive tradecraft, broad understanding of modern operating systems, application and AI-related attack surfaces, sound technical judgment, and the ability to manage assigned engagements from planning through delivery.

The successful candidate should be comfortable moving across different attack surfaces - from endpoints and identity infrastructure to web applications, APIs, AI-enabled systems, and cloud environments - and chaining vulnerabilities and misconfigurations into realistic attack scenarios.

Responsibilities

• Take ownership of assigned Red Team, adversary emulation, Purple Team, and threat-led offensive security engagements, from planning and rules of engagement through execution, reporting, and client debrief.
• Emulate realistic threat actors and execute multi-stage attack chains, including reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, command and control, defense evasion, and achievement of agreed business objectives.
• Perform offensive security assessments across macOS and Windows environments, enterprise endpoints, identity systems, networks, web applications, APIs, AI-enabled applications, cloud platforms, and hybrid infrastructure.
• Identify and exploit vulnerabilities across web applications and APIs, and understand how application-layer weaknesses can be combined with infrastructure, endpoint, identity, and cloud attack paths.
• Assess AI and LLM-enabled applications and workflows, including common attack surfaces such as prompt injection, insecure tool/function usage, excessive permissions, sensitive data exposure, unsafe integrations, and weaknesses in AI agents and LLM-connected applications.
• Evaluate how AI components interact with traditional application, identity, API, endpoint, and cloud attack surfaces, and identify opportunities to chain AI-related weaknesses into broader attack paths.
• Design threat-informed scenarios and map adversary tactics, techniques, and procedures to MITRE ATT&CK and other relevant threat-led testing frameworks.
• Assess environments across Active Directory, Microsoft Entra ID, endpoints, networks, applications, cloud platforms, identity systems, and hybrid infrastructure, chaining weaknesses into realistic attack paths and business impact.
• Develop, customize, and maintain offensive tooling, scripts, payloads, command-and-control infrastructure, and operational tradecraft while applying appropriate safety and operational-security controls.
• Work closely with SOC, detection engineering, incident response, and security architecture teams to validate detection and response capabilities and translate observed gaps into actionable improvements.
• Communicate directly with clients, present technical and executive results, and provide risk-based recommendations aligned with the client’s threat landscape and business priorities.
• Contribute to technical quality reviews, knowledge sharing, security research, reusable methodologies, and the continued development of the team’s Red Team capabilities.

Requirements

• 5+ years of hands-on experience in offensive security or closely related technical security roles, with substantial experience in Red Team, adversary simulation, or advanced penetration testing – Must.
• Proven ownership of complex Red Team or advanced offensive security engagements from planning through delivery – Must.
• Hands-on experience executing multi-stage attack chains in complex enterprise environments – Must.
• Strong hands-on offensive security experience with macOS, including understanding of the operating system, security controls, permissions, persistence mechanisms, endpoint protections, and common attack surfaces – Must.
• Strong understanding of modern operating systems and endpoint security, particularly macOS and Windows – Must.
• Solid understanding of Web Application Security, including common web and API vulnerabilities, authentication and authorization weaknesses, session management, and the ability to identify and exploit application-layer attack paths – Must.
• Understanding of AI/LLM security concepts and emerging AI attack surfaces, including prompt injection, AI agents, tool/function calling, sensitive data exposure, authorization boundaries, and risks created by integrating LLMs with enterprise systems – Must.
• Strong knowledge of enterprise identity and authentication concepts, including Active Directory and/or Microsoft Entra ID, credential attacks, privilege escalation, and identity-based attack paths – Must.
• Hands-on experience with offensive tooling, command-and-control frameworks, scripting, payload development or customization, and adapting tools to specific environments – Must.
• Practical understanding of adversary TTPs and MITRE ATT&CK – Must.
• Strong independent working skills, client-facing communication abilities, and professional English reporting skills – Must.
• Hands-on AI/LLM security testing, AI Red Teaming, agentic AI security, or research into AI-specific attack techniques – Significant Advantage.
• Experience with cloud or hybrid environments, Purple Team exercises, detection validation, or EDR/XDR evasion – Significant Advantage.
• Advanced offensive security certifications, threat-led testing experience, security research, exploit development, or custom offensive tool development – Advantage.