Red Team Operator

Job Title: Red Team OperatorLocation: Remote (Colombia)Duration: 12 MonthsEmployment Type: ContractExperience: 3–5+ yearsIndustry: Cybersecurity / Offensive Security / Red Team Operations
Job DescriptionWe are seeking a Red Team Operator for a 12-month remote contract based in Colombia. This role is ideal for an offensive security professional with 3–5 years of experience in red teaming, penetration testing, or adversary emulation who is passionate about simulating real-world cyberattacks to evaluate and strengthen enterprise security.The Red Team Operator will plan and execute authorized adversary simulations, identify security weaknesses across enterprise environments, and collaborate closely with blue teams to improve detection and response capabilities. This position also offers the opportunity to leverage AI-enabled security workflows to enhance offensive security operations.
Required Qualifications3–5 years of professional experience in Red Teaming, Penetration Testing, Offensive Security, or Adversary Emulation.Hands-on experience conducting enterprise offensive security assessments.Strong understanding of MITRE ATT&CK and modern adversary tactics, techniques, and procedures.Experience with:Windows, Linux, and Active DirectoryEnterprise networking and authentication systemsWeb application securityCommand-and-control frameworksPrivilege escalation and post-exploitationCloud environments (AWS, Azure, or GCP)Experience operating red team infrastructure including domains, DNS, TLS certificates, VPNs, proxies, cloud infrastructure, and infrastructure-as-code.Strong scripting/programming skills in one or more of:PythonPowerShellBashC#GoC/C++JavaScriptExperience working with EDR, SIEM, logging platforms, and security monitoring technologies.Strong communication skills with the ability to present technical findings to both technical and non-technical stakeholders.
QualificationsExperience with cloud identity platforms, SSO, MFA, and privileged access management.Familiarity with AI-assisted offensive security, LLM integrations, agent security, RAG security, prompt injection testing, or AI application assessments.Experience with phishing infrastructure, social engineering, and payload delivery.Knowledge of Infrastructure-as-Code, containers, and cloud-native environments.