Job Title: Red Team EngineerRole Overview
We are looking for a skilled Red Team Engineer who can simulate real-world attacks to identify security gaps across infrastructure, applications, and networks. The role involves hands-on offensive security work, including command-and-control operations, tunneling, and deep protocol-level exploitation.
Key Responsibilities
- Conduct red team engagements to simulate advanced adversary tactics across network, application, and cloud environments
- Design, deploy, and manage Command & Control (C2) infrastructure for covert operations
- Perform network penetration testing, including internal and external attack simulations
- Develop and use tunneling techniques (e.g., pivoting, SOCKS proxies) to bypass network restrictions
- Execute protocol-level security assessments for services such as Redis, MSSQL, PostgreSQL, MongoDB, etc.
- Identify misconfigurations, weak authentication mechanisms, and privilege escalation paths in database services
- Perform lateral movement and persistence techniques within compromised environments
- Assess and exploit weaknesses in CI/CD pipelines (e.g., GitHub, GitLab, Jenkins)
- Collaborate with blue team and engineering teams to validate findings and improve defenses
- Create detailed reports with attack paths, impact analysis, and remediation guidance
Required Skills & Experience
- Strong hands-on experience with Red Teaming / Offensive Security
- Proficiency in C2 frameworks (e.g., Cobalt Strike, Sliver, Mythic or similar)
- Deep understanding of network protocols and pentesting methodologies
- Experience with tunneling, pivoting, and evasion techniques
- Solid knowledge of database security testing:
- Redis exploitation (unauth access, RCE vectors)
- MSSQL exploitation (xp_cmdshell, privilege escalation)
- PostgreSQL and MongoDB security weaknesses
- Experience testing network services and infrastructure (ports, firewalls, segmentation bypass)
- Understanding of CI/CD systems:
- GitHub / GitLab pipelines
- Jenkins configurations and common misconfigurations
- Familiarity with scripting (Python, Bash, or similar) for automation and payload development
- Experience with tools like Nmap, Metasploit, Burp Suite, BloodHound, Impacket, etc.
Work Location: In person
