Senior Red Team Operator

Senior Red Team Operator

We’re helping a client build a new adversary simulation and offensive research capability from the ground up and are looking for an experienced red team operator to help set the foundations.

This is a hands-on role delivering intelligence-led, long-running red team campaigns where stealth, tradecraft, and tailored TTPs matter. You’ll work on realistic adversary simulations with meaningful dwell-time and objectives, not short compliance-driven testing.

Alongside live engagements, you’ll have dedicated time for R&D, building tooling, researching new techniques, and continuously improving how the red team function operates as it scales.

What You’ll Do

Deliver long-running red team operations designed to simulate real adversaries and demonstrate genuine business risk Plan and execute threat intelligence-led campaigns with tailored objectives and TTPs Spend dedicated time on R&D, including custom tooling, technique research, and improving operational capability Operate with a strong stealth and OPSEC mindset across complex enterprise environments Collaborate with detection, DFIR, and threat intelligence teams to improve coverage and outcomes Produce clear, high-quality reporting for both technical teams and senior stakeholders

About You

At least 2 years in a senior or principal red team role, or equivalent responsibility in an offensive security function Experience with intelligence-led operations, purple teaming, and regulatory frameworks such as TIBER-EU or CBEST Strong background in offensive tooling and automation using C/C++, .NET, and Python Experience customising C2 frameworks and adapting tradecraft to mature defensive environments Solid understanding of endpoint detection and telemetry, with disciplined operational security Hands-on experience across both on-prem and cloud enterprise environments Collaborative, low-ego mindset and comfortable building a function as well as delivering engagements

Legal right to work in the UK or EU

Nice To Have:

certifications such as OSEP, OSCE, OSEE, CRTO, CCSAS, or public contributions including tools, blogs, or conference talks

What’s On Offer Competitive salary (will be updated to show salary by 22/01/26) 25 days annual leave Flexible hybrid or remote working within Europe International, highly technical team environment Close collaboration with detection, DFIR, and threat intelligence teams Opportunity to help shape a red team capability from an early stage with proper time for R&D