We’re working with a specialist cybersecurity consultancy looking for an experienced Red Team Operator to deliver realistic attack simulations against complex client environments.

The team helps organisations understand how an attacker could compromise their systems, achieve meaningful objectives and avoid detection. Each assignment is shaped around the client’s technology, business priorities and relevant threats, with findings that help security teams improve their defences.

This is a technical delivery position with substantial time spent conducting operations, developing tools and testing new approaches. You’ll work closely with experienced offensive security specialists and technical leadership, while helping less experienced colleagues develop.

The work

You’ll deliver adversary simulations across enterprise infrastructure, cloud services and connected identity systems. Engagements can span the full attack lifecycle, from establishing an initial foothold to pursuing agreed objectives within environments with established security controls.

Your responsibilities will include:

· Planning and conducting red team assignments informed by relevant threat intelligence.

· Developing engagement-specific approaches to initial access, including phishing, social engineering and payload delivery.

· Investigating and exploiting attack paths involving directory services, credentials, trust relationships and connected identity platforms.

· Assessing opportunities for compromise across cloud infrastructure and business applications, including AWS, Google Cloud, Microsoft 365, Entra ID, Okta and other SaaS services.

· Adapting operational techniques to environments protected by endpoint monitoring, multifactor authentication and access policies.

· Developing and modifying tools used for command and control, payload delivery and evasion.

· Evaluating emerging offensive research and turning useful findings into techniques the team can apply.

· Reproducing relevant adversary behaviours to test how effectively clients prevent, detect and respond to attacks.

· Working with defensive teams during purple team activities to explain attack execution and identify opportunities for better detection.

· Producing clear reports that connect technical findings with practical security improvements.

· Providing guidance to junior operators and contributing to shared methods and technical knowledge.

What you’ll bring

You’ll need practical experience delivering red team engagements and confidence operating within complicated environments where security teams and monitoring capabilities are already established.

We’re particularly interested in people with:

· Strong knowledge of Windows domain security, identity compromise and attack paths spanning on-premises and cloud systems.

· Operational experience with command-and-control tooling such as Sliver, Cobalt Strike or Mythic, supported by an understanding of the underlying mechanisms.

· An understanding of endpoint detection technology, evasion considerations and the operational impact of their decisions.

· The ability to build or adapt tools using languages such as Python, C#, PowerShell, Go, Rust or C/C++.

· An active interest in offensive security research and changes in attacker behaviour.

· The ability to explain technical activity clearly to both security practitioners and wider client stakeholders.

· Sound judgement, a responsible approach to authorised testing and ownership of work through to completion.

· A willingness to mentor colleagues and contribute to the development of the wider team.

Experience working with large enterprises or organisations in regulated sectors would be particularly relevant.

Useful additional experience

The following would strengthen an application, but are not essential:

· Discovering vulnerabilities or developing proof-of-concept exploits.

· Delivering exercises aligned with CBEST, GBEST, TIBER-EU or comparable testing programmes.

· Designing simulations around the behaviour of particular threat groups.

· Sharing research through technical articles, open-source projects or conference presentations.

· Relevant qualifications, including OSEP, OSCE3, CRTO, CRTL, CCSAS or CCRTS.

Practical capability and the ability to demonstrate your approach matter more than holding a particular certification.

The team and working environment

You’ll join experienced colleagues in a team that gives operators room to make technical decisions and take responsibility for delivery. Assignments are scoped around individual client needs, with an emphasis on thorough preparation and useful outcomes.

Research, constructive technical discussion and knowledge sharing are part of the working culture. You’ll be expected to contribute ideas, challenge assumptions respectfully and collaborate with offensive and defensive specialists.

Development and package

· Salary reflecting your experience and technical capability.

· Flexible working arrangements.

· Annual leave and pension provision.

· Funding for relevant training and research.

· Access to specialist labs, threat intelligence and testing infrastructure.

· Opportunities to develop internal tooling and improve delivery methods.

· Support for publishing technical work and participating in industry events.

· Progression towards technical leadership or a deeper research specialism.

The Essentials:

· Salary: Up to £80k base DOE

· Location: Fully remote (UK-based)

· Requirement: Sole British National (required for their specific client engagements)