Red Team Operator (ts Clearance)

Deloitte Deloitte · Consulting

This role focuses on simulating real-world adversary tactics, techniques, and procedures to assess and improve an organization's detection, response, and resilience capabilities. It involves planning and executing adversary emulation, penetration testing, social engineering, and post-exploitation activities. The role requires collaboration with blue teams and security leadership to enhance defensive capabilities and adherence to strict operational guidelines.

What you'd actually do

  1. Plan and execute red team operations against enterprise environments, web applications, cloud platforms, and endpoints.
  2. Emulate advanced threat actors using realistic attack paths, tools, and techniques.
  3. Conduct reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration simulations.
  4. Assess the effectiveness of security controls, monitoring, and incident response processes.
  5. Deliver clear after-action reports and debriefs to technical and leadership stakeholders.

Skills

Required

  • Certified Red Team Operator (CRTO) or Offensive Security Certified Professional (OSCP)
  • Ability to work onsite up to 5 days a week
  • Ability to travel 20%, on average

Nice to have

  • Experience with C2 Frameworks such as Cobalt Strike, Havoc, Mythic, Sliver
  • Experience with cloud red teaming in AWS, Azure, or GCP.
  • Familiarity with detection engineering, SIEM, EDR, and purple team exercises.
  • Experience developing custom tooling or modifying public offensive tools.
  • Knowledge of malware analysis, reverse engineering, or exploit development.

What the JD emphasized

  • Active Top-Secret Clearance