Senior Consultant, Red Team Operator, Offensive Security

About the role

In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answers—in all areas of business. We embrace diverse backgrounds and global perspectives, and we cultivate diversity by respecting, including, and valuing one another. As part of One team, One Kroll, you’ll contribute to a supportive and collaborative work environment that empowers you to excel. Our Offensive Security professionals are on a mission to make the world a safer place, one company at a time. We help our clients discover, understand, and remediate security risks across their networks, systems, applications, cloud environments, and identity platforms. Our clients trust us to use advanced offensive security tools, creativity, imagination, and expert knowledge to identify realistic attack paths and improve cyber resilience.

Responsibilities

• Support the delivery of complex red team, purple team, assumed-breach, and adversary emulation engagements.
• Work with clients to understand their environments, help define realistic attack objectives, develop attack paths, and execute authorised offensive security activity within agreed rules of engagement.
• Operate across a range of attack surfaces, including enterprise networks, Active Directory, Microsoft Entra ID, Microsoft 365, cloud platforms, endpoints, externally exposed services, and, where authorised, social engineering scenarios.
• Help clients understand the business impact of identified attack paths and provide clear, actionable recommendations to improve prevention, detection, and response.
• Deliver red team, purple team, assumed-breach, and adversary emulation engagements for clients across multiple sectors.
• Support engagement planning, including threat-informed scenarios, attack objectives, rules of engagement, operational security considerations, and success criteria.
• Execute hands-on offensive activity across enterprise environments, including Active Directory exploitation, credential access, privilege escalation, lateral movement, and objective-based testing.
• Assess and exploit attack