Core Expertise:

Red Teaming, Adversary Simulation, Penetration Testing, or Offensive Security operations.

Key Responsibilities:

- Hands-on experience conducting Red Team assessments, breach and attack simulations, assumed breach exercises, and objective-based adversary emulation.

- Proficient with offensive security tools such as Cobalt Strike, Mythic, Sliver, Burp Suite Pro, Metasploit, BloodHound, CrackMapExec/NetExec, Impacket, Mimikatz, Empire, and Nmap.

- Experience testing and exploiting weaknesses across Active Directory, Windows/Linux environments, cloud platforms (Azure/AWS), web applications, APIs, and network infrastructure.

- Strong understanding of the MITRE ATT&CK Framework, attack techniques, privilege escalation, lateral movement, persistence, defense evasion, and data exfiltration methodologies.

- Execute reconnaissance, initial access, post-exploitation, and adversary simulation activities while maintaining operational security and detailed documentation.

- Assess the effectiveness of security controls including EDR/XDR, SIEM, Identity Security, Email Security, Network Security, and SOC detection capabilities.

- Develop attack scenarios, red team playbooks, and detection engineering recommendations in collaboration with Blue Team and SOC teams.

- Prepare technical reports, executive summaries, attack narratives, and prioritized remediation recommendations for identified security gaps.

Preferred Qualifications:

- Preferred certifications include OSCP, OSEP, CRTO, CRTP, PNPT or equivalent