Red Team Lead (Offensive Cybersecurity)

Scope of Work

Develop comprehensive taxonomies for cyber-capability tasks and attack stages relevant to modern threat landscapes.
Design and validate evaluation frameworks for offensive security, focusing on real-world scenarios involving exploit chains, malware, cloud/appsec, and social engineering.
Create safe and effective proxy tasks to simulate advanced attack vectors while maintaining strict boundaries and ethical controls.
Formulate robust scoring rubrics to assess attack sophistication, coverage, and impact across diverse domains.
Review, critique, and enhance benchmarks for red team operations to ensure alignment with evolving security risks and best practices.
Produce clear, well-documented methodologies and technical write-ups, communicating complex security concepts to both technical and non-technical audiences.
Collaborate asynchronously with project stakeholders to iterate on frameworks and incorporate feedback into deliverables.

Preferred Qualifications

• 5+ years of hands-on experience in offensive cybersecurity, red teaming, exploit development, or vulnerability research (8–20 years preferred for senior contributors).
• Track record as a principal security engineer, exploit developer, cloud red-team lead, malware reverse-engineer, or security researcher specializing in attack chains or social engineering.
• Deep expertise in cyber attack methodologies, exploit chains, and cloud/application security assessments.
• Strong background in malware analysis, reverse engineering, and/or social engineering tactics and defenses.
• Demonstrated ability to produce clear, actionable written and verbal communication for a variety of audiences.
• Advanced degree, relevant professional security certifications, or equivalent operational experience highly valued.
• Experience building benchmarking or evaluation frameworks in cybersecurity is a plus.

Benefits

No benefits are mentioned in the job posting.

Pay

No pay details are provided in the job posting.

Schedule

No schedule details are provided in the job posting.