Senior Red Team & Offensive Security Consultant

About the role

We are looking for a senior hands‑on offensive security professional to lead complex Red Team and adversary simulation engagements for a portfolio of local and global clients. The role blends deep technical execution with end‑to‑end project ownership, from planning through delivery and client debrief.

Key responsibilities

• Own Red Team, Purple Team and threat‑led offensive security projects, managing planning, rules of engagement, execution, reporting and client presentations.
• Emulate realistic threat actors and run multi‑stage attack chains covering reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, command‑and‑control, defense evasion and business‑objective achievement.
• Design threat‑informed scenarios and map tactics, techniques and procedures to MITRE ATT&CK and other frameworks.
• Assess enterprise environments (Active Directory, Microsoft Entra ID, endpoints, networks, applications, cloud platforms and hybrid infrastructure) and build realistic attack paths.
• Develop, customize and maintain offensive tooling, scripts, payloads and C2 infrastructure while applying safety and operational‑security controls.
• Collaborate with SOC, detection engineering, incident response and security architecture teams to validate detection capabilities and recommend improvements.
• Contribute to knowledge sharing, research initiatives and reusable Red Team methodologies.

Required profile

• 7+ years in offensive security or related technical fields, including 4+ years in Red Team, adversary simulation or advanced infrastructure penetration testing.
• Proven ownership of complex Red Team engagements from planning through delivery.
• Hands‑on experience executing multi‑stage attack chains in complex enterprise environments.
• Strong knowledge of Active Directory, Windows authentication mechanisms and Microsoft Entra ID.

Required skills

• Active Directory
• Windows operating systems
• Microsoft Entra ID
• MITRE ATT&CK framework
• Offensive tooling development
• Scripting for payload and C2 creation