We are seeking a skilled and experienced Red Team Specialist with a strong background in OSINT, phishing campaigns, application and infrastructure penetration testing, and low-level programming. The ideal candidate has a solid understanding of advanced offensive techniques, malware development, and threat emulation, and is capable of conducting sophisticated attacks to evaluate and improve our security defenses. This role is crucial for simulating real-world threat scenarios and proactively identifying security weaknesses across our organization.

Key Responsibilities:

• OSINT and Target Reconnaissance: Conduct extensive Open Source Intelligence (OSINT) gathering to map potential attack surfaces and identify key information that could be leveraged in red team operations.
• Phishing and Social Engineering: Develop and execute phishing campaigns and other social engineering tactics to simulate realistic attack scenarios. Measure effectiveness and provide insights into user awareness and susceptibility.
• Application and Infrastructure Testing: Perform in-depth assessments of web applications, APIs, and infrastructure, identifying vulnerabilities that could be exploited by adversaries. Focus on both internal and external assets.
• Malware Development and Low-Level Exploitation: Develop and deploy custom malware, exploits, or payloads tailored to the engagement requirements. Utilize low-level programming (e.g., C, C++, Assembly) to create effective evasion techniques and bypass security controls.
• Collaboration and Reporting: Work closely with blue teams and SOC analysts to provide actionable recommendations. Create detailed technical reports on findings, as well as high-level summaries for senior leadership.
• Tool Development and Automation: Build and customize tools and scripts for automation in reconnaissance, exploitation, and post-exploitation phases, enhancing red team effectiveness.
• Stay Up-to-Date with Threat Landscape: Regularly research and stay informed on the latest threats, exploits, and attack techniques, incorporating them into red team operations.