Senior Red Team Operator

We are actively seeking a Senior Red Team Operator with proven, hands-on experience executing real-world exploitation in enterprise environments. This role is strictly focused on active offensive operations. If your experience is limited to running automated tools, compliance-based testing, or lab environments (CTFs), this is not the role for you.

We need professionals who have personally achieved system-level compromise during authorized engagements and can demonstrate full attack lifecycle capability. Core Responsibilities: • Lead and execute advanced Red Team operations and full-scope adversary simulations across complex enterprise environments. • Execute the full attack lifecycle: Initial access, Privilege escalation, Credential harvesting, Lateral movement, and Persistence.

• Achieve and validate system-level compromise (Windows SYSTEM, Linux root) under realistic conditions. • Document complete attack chains, highlighting exact exploitation methodologies, business impact, and actionable remediation guidance. Mandatory Qualifications: • Minimum of 5 years of hands-on offensive security experience in enterprise environments.

• A track record of at least 10 validated OS-level shell or RCE cases (must be personally executed by you in authorized engagements). • Deep, practical understanding of the Active Directory attack paths (e.g., Kerberoasting, AS-REP Roasting, ACL abuse, NTLM relay, DCSync). • Important Note: Theoretical exercises, training labs (HTB, TryHackMe), and CTF platforms are NOT considered valid experience for this senior role.

Evaluation Process & How to Apply: We do not hire based on paper alone. Shortlisted candidates will face a rigorous Full-Spectrum Assessment to test both technical exploitation depth and operational mindset. To apply and bypass the standard queue, please send the following directly to with the subject line "Senior Red Team Operator - (Your Name)": Your updated CV.

A brief summary of your real-world operational achievements. REQUIREMENT: A high-level, anonymized write-up of an exploitation methodology you favor (no client data), a link to a public vulnerability disclosure/bug bounty report you authored, OR a link to your technical blog/GitHub repository demonstrating custom exploit development or advanced tooling. (Note: Do NOT submit any materials that violate NDAs from past or current employers).