Red Team Penetration Tester

Key Responsibilities

• Plan, design, and execute advanced Red Team and offensive security engagements, including intelligence gathering, network, operating system, web application, and mobile application penetration testing, social engineering assessments, physical security testing, command-and-control (C2) development, and adversary emulation activities.
• Conduct covert black-box security assessments and targeted white-box penetration testing across enterprise environments to identify vulnerabilities and validate security controls.
• Partner with Cyber Defense, Security Operations, Security Assurance, and broader IT teams to coordinate testing activities, validate remediation efforts, and enhance organizational security posture.
• Leverage Artificial Intelligence (AI), Large Language Models (LLMs), and agentic AI technologies to improve penetration testing methodologies, accelerate exploit and payload development, automate offensive security workflows, and enhance assessment effectiveness.

Core Skills & Expertise

• Extensive experience in network, web application, and mobile application security testing.
• Proven background in exploit development, payload creation, and offensive security tooling.
• Deep understanding of Endpoint Detection and Response (EDR) platforms (e.g., CrowdStrike, Carbon Black) and adversarial techniques used to evaluate and improve detection capabilities.
• Strong expertise in social engineering, reconnaissance, and intelligence gathering methodologies.
• Advanced scripting and automation skills using Python, PowerShell, Bash, and related technologies.
• Experience designing and deploying command-and-control (C2) infrastructure and simulating adversary tradecraft to assess defensive monitoring and response capabilities.
• Strong knowledge of AI/LLM ecosystems, agentic AI frameworks, orchestration platforms, and protocols such as Model Context Protocol (MCP), with the ability to apply these technologies to offensive security operations.
• Expertise in vulnerability research, exploit development, and the identification and validation of security weaknesses across complex environments.
• Hands-on experience with database security testing across MSSQL, DB2, MySQL, and other enterprise platforms.
• Proficiency with leading offensive security tools including Kali Linux, Metasploit, Cobalt Strike, Nmap, Burp Suite, Wireshark, Nessus, Qualys, BloodHound, Hashcat, Ghidra, IDA Pro, Impacket, CrackMapExec, and related technologies.
• Knowledge of Windows internals, APIs, Living-off-the-Land (LOL) techniques, and modern attack methodologies.

Qualifications

• 5+ years of experience in cybersecurity, information assurance, or offensive security.
• 3+ years of hands-on penetration testing and Red Team experience.
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related technical discipline preferred.
• Industry certifications such as OSCP, OSWE, GXPN, GMOB, GWAPT, or equivalent are highly desirable.