Security Advisor Specialist - Offensive Security; Global Red Team

As part of the expansion of its offensive cybersecurity capabilities, a large international organization is currently building its Global Red Team
.

The hiring manager is looking to onboard multiple specialists to help establish a dedicated team focused on simulating real-world cyberattacks and assessing the enterprise security posture.

This Red Team program is still in its early stages, offering the opportunity to actively contribute to building methodologies, tools, and processes.

The Security Advisor Specialist - Offensive Security is responsible for testing the effectiveness of security controls, networks, and detection/response capabilities.

The specialist operates as an offensive expert, simulating advanced threat actor behaviors across a global enterprise environment spanning multiple regions and affiliates.

• Conduct reconnaissance activities (OSINT, threat intelligence, attack surface mapping)
• Perform advanced offensive security testing across networks, systems, and applications
• Simulate real-world cyberattack scenarios across the full intrusion kill chain
• Assess the effectiveness of security controls and detection capabilities
• Evade modern security technologies (EDR, SIEM, etc.)
• Identify and exploit technical vulnerabilities
• Develop persistence, lateral movement, and data exfiltration techniques
• Shift to a Purple Team approach when detected to improve defenses
• Produce detailed technical and executive reports
• Provide actionable remediation recommendations
• Define and enforce Rules of Engagement (ROE)
• Maintain and enhance offensive tools, techniques, and procedures

• Hybrid infrastructures
• Critical business applications
• SOC / SIEM / EDR platforms
• IAM / DLP solutions

• Advanced expertise in Penetration Testing and Red Team operations
• Strong knowledge of network protocols (TCP/IP, DNS, UDP)
• Experience with C2 frameworks, beacons, and covert channels
• Understanding of routing and enterprise network architecture
• Proven ability to evade EDR controls
• Knowledge of OWASP Top 10, MITRE ATT&CK, CVSS
• Ability to exploit complex vulnerabilities
• Strong manual testing capabilities beyond automated scanning
• Python scripting skills

• SOC Operations
• IAM / SIEM / DLP ecosystems
• Security frameworks (NIST, ISO 27001, COBIT)