Run realistic, objective-driven red team engagements against a well-defended organisation. You decide how to get there: the tradecraft, the tooling and the path. The brief is to think and act like a determined adversary and show the business where it would really break.
This is not a compliance exercise or a scan-and-report role. You will have the freedom to design campaigns, build your own tooling and change approach mid-engagement when the situation calls for it.
What you will do
- Plan and lead end-to-end adversary simulations, from reconnaissance and initial access through to objective completion
- Emulate current threat actor tradecraft across network, cloud, identity and physical or social vectors
- Develop custom tooling, payloads and infrastructure to evade modern detection
- Work closely with the blue team on purple team exercises to improve detection and response
- Write clear, evidence-led reports and brief technical and senior audiences with equal confidence
- Mentor peers and help shape the red team's methodology and roadmap
What you bring
- At least seven years in offensive security, with substantial hands-on red team experience
- Proven record of delivering full-scope engagements, not just penetration tests
- Strong command of Active Directory attacks, C2 frameworks, EDR evasion and post-exploitation
- Ability to code or script to build and adapt your own tools
- Sound judgement on rules of engagement, risk and operating safely in live environments
- Curiosity, initiative and the confidence to challenge assumptions
Why it is worth a conversation
Real autonomy, interesting problems and a team that values craft over box-ticking.
EA Licence: 16S8091
EA Reg No.: R1656500