Job Search

Red Team Operator (Cyber Resilience)

We are seeking an experienced Red Team Operator to help assess and strengthen the resilience of critical technology, systems and services. You will plan and deliver authorised adversary simulations, emulating realistic threat actors to identify weaknesses across people, processes, applications, infrastructure and physical environments.

Working collaboratively with security engineering, threat intelligence, incident response and technology teams, you will develop threat-informed scenarios based on current tactics, techniques and procedures. Your responsibilities will include reconnaissance, vulnerability validation, social engineering, exploitation, privilege escalation, lateral movement, command and control, and the safe assessment of detection and response capabilities. Activities must be carefully scoped, documented and conducted in line with agreed rules of engagement.

You will produce clear, evidence-based reports that explain technical findings, business impact and realistic remediation options. You will also brief stakeholders at varied levels of technical understanding, support purple-team exercises, and help validate improvements through targeted retesting. A strong focus on operational safety, data protection and minimising disruption is essential.

Applicants should have demonstrable experience in red teaming, penetration testing or adversary emulation, with a sound understanding of cyber resilience and attack lifecycle methodologies. Practical knowledge of enterprise networks, cloud environments, identity and access management, operating systems, web applications and common security controls is required. Familiarity with frameworks such as MITRE ATT&CK, CREST or equivalent standards would be advantageous.

You should be comfortable scripting or automating tasks using languages such as Python, PowerShell or Bash, and capable of adapting your approach as assessments develop. Relevant professional certifications, such as CREST, OSCP, OSEP, CRTO or equivalent experience, are desirable. We value curiosity, sound judgement, excellent written and verbal communication, and the ability to work discreetly and constructively in a highly collaborative environment.

We are seeking a Red Team Operator (Cyber Resilience) to help assess and strengthen the resilience of critical systems, services and people against realistic cyber threats. You will plan and deliver authorised red team and threat emulation exercises, working across infrastructure, cloud, applications, identities, networks and physical environments where appropriate. Your work will support the identification of weaknesses that could affect confidentiality, integrity, availability and operational continuity.

Responsibilities will include developing exercise plans and rules of engagement; conducting reconnaissance, initial access, privilege escalation, lateral movement, persistence and exfiltration simulations; and safely testing detection, response and recovery capabilities. You will use a blend of commercial tools, open-source frameworks and bespoke techniques, while maintaining strict control of scope, evidence and operational risk. You will also collaborate with blue teams and security operations functions to validate alerts, defensive controls, incident response procedures and recovery arrangements.

You will document technical findings and business impact clearly, producing reports that include practical remediation recommendations and prioritised improvements. You will brief technical and non-technical stakeholders, contribute to lessons-learned sessions and help track actions through to completion. The role may also involve supporting vulnerability assessments, purple team activities, tabletop exercises, security architecture reviews and the development of repeatable testing methodologies.

Applicants should have proven experience in red teaming, penetration testing, adversary simulation or a closely related cyber security discipline, together with a strong understanding of common attack paths, the MITRE ATT&CK framework and modern defensive technologies. Practical experience with Windows and Linux environments, Active Directory, cloud platforms, scripting and network protocols is expected. Relevant qualifications such as CREST, OSCP, OSEP, CRTO or equivalent experience are desirable. You must demonstrate sound judgement, excellent written and verbal communication skills, a methodical approach to evidence handling and a commitment to responsible, lawful and ethical security testing.

As a Red Team Operator (Cyber Resilience), you will help assess and strengthen the organisation’s ability to prevent, detect, respond to and recover from sophisticated cyber threats. Working as part of a collaborative security function, you will plan and deliver authorised adversary simulation exercises that test people, processes and technology across a range of scenarios.

Your responsibilities will include developing realistic attack plans based on current threat intelligence, conducting red team and purple team activities, and emulating the tactics, techniques and procedures used by relevant threat actors. You will assess controls across networks, cloud environments, applications, endpoints, identity services and operational processes, while maintaining strict adherence to agreed rules of engagement and legal requirements.

You will work closely with security operations, infrastructure, engineering, risk and business stakeholders to validate detection and response capabilities. This will involve documenting findings, evidencing attack paths, assessing business impact and producing clear reports for both technical and senior audiences. You will also support post-exercise reviews, recommend practical improvements and help track remediation through to completion. Where appropriate, you will contribute to incident response exercises, crisis simulations and wider cyber-resilience testing.

Applicants should have practical experience in red teaming, penetration testing, adversary simulation, security testing or incident response, with a strong understanding of common attack methodologies and defensive controls. Experience with scripting or programming languages such as Python, PowerShell or Bash, together with familiarity with cloud platforms, Active Directory, networking and security tooling, is desirable. Relevant professional certifications are welcome, but demonstrable capability and sound judgement are equally important.

You will need excellent communication skills, a methodical approach and the ability to operate discreetly in complex environments. The successful candidate will be curious, adaptable and comfortable challenging assumptions while building constructive relationships. A strong commitment to ethical conduct, confidentiality, continuous learning and responsible vulnerability handling is essential.

We are seeking a Red Team Operator (Cyber Resilience) to challenge and strengthen the organisation’s ability to prevent, detect, respond to and recover from sophisticated cyber attacks. You will plan and deliver authorised red team, adversary simulation and purple team engagements across people, processes, applications, infrastructure and cloud environments.

Working with security operations, technology, risk and resilience teams, you will emulate realistic threat actors using intelligence-led techniques. Your responsibilities will include defining engagement objectives and rules of engagement, developing attack scenarios, conducting reconnaissance, identifying and exploiting weaknesses, and safely demonstrating potential business impact. You will maintain a strong focus on controlled execution, clear communication and protection of operational services.

You will document activity accurately, preserve appropriate evidence and produce high-quality reports for both technical and senior stakeholders. This will include explaining attack paths, assessing the effectiveness of preventative and detective controls, identifying gaps in cyber resilience, and providing practical, prioritised recommendations. You will also support purple team exercises, replay attack techniques with defenders, validate remediation and track improvements through to completion.

The successful candidate will have demonstrable experience in red teaming, penetration testing, adversary simulation or a closely related security role. You should be confident working across networks, endpoints, identity platforms, web applications and cloud technologies, with practical knowledge of common attack frameworks such as MITRE ATT&CK. Experience with scripting or programming, security tooling, operational technology or incident response would be advantageous.

You will need strong analytical and problem-solving skills, sound judgement and a responsible approach to handling sensitive information. The ability to explain complex technical findings clearly, collaborate with varied stakeholders and operate effectively within defined legal, ethical and safety boundaries is essential. Relevant professional certifications or equivalent practical experience are welcomed. This role may involve occasional travel, out-of-hours exercises and participation in resilience or incident response activities.