Senior Red Team Operator
Core
Simulate cyberattacks and identify vulnerabilities within the Sun Life environment through offensive security assessments, adversary emulation, and tool development.
Role type
Senior IC offensive security engineer (red team)
Builds
Red Team assessments, attack simulations, adversary emulation exercises, and custom security tooling
Domain
Cybersecurity / Offensive Security
Required skills
Offensive security programming (C, C++, ASM, C#, JavaScript, PowerShell, Rust, Nim), network penetration testing, application penetration testing, social engineering, exploit development, malware analysis, reverse engineering, Active Directory exploitation, cloud environment management (AWS, Azure, GCP, Digital Ocean), threat analysis, report writing
Preferred skills
Grey/black hat engagement leadership, EDR evasion techniques, custom tooling development, OSINT, MITRE framework application, IaaS/SDN cloud environments, interpreted languages (Ruby, Python, PHP), compiled languages (Java, C, C++, Assembly)
Responsibilities
Plan, carry out, and report on Red Team assessments, attack simulations and adversary emulation exercises to identify vulnerabilities in critical information systems. Perform network penetration, web and mobile application testing, source code reviews, threat analysis, and social engineering assessments. Develop scripts, tools, and programs for Red Team operations. Manage, maintain, and improve an OPSEC-focused state-of-the-art command-and-control (C2) red team cloud environment. Assist with and develop security control evasion and bypass capabilities. Work with other parts of the business to develop a method for testing detection capabilities through Purple Team Exercises and Red Team exercises. Research latest threats and adhere to guidelines on Red Team Frameworks. Assist in the production of weekly/ monthly reports on security vulnerability trending and direction.
Seniority
Senior, hands-on IC with mentoring responsibilities
