[Remote] Security - Red Team Engineer Consultant

Note: The job is a remote job and is open to candidates in USA. Aegistech is seeking a Remote Red Team Engineer for a long-term assignment with their client, the world's largest alternate investor. The role involves providing hands-on expertise in security projects including red teaming, penetration testing, and threat intelligence, while supporting the Security Operations team in identifying and mitigating threats and vulnerabilities.

Responsibilities

• Plan and execute covert Red Team operations from initial compromise to achieving complex and high-value objectives while maintaining operational security
• Collaborate with SOC in purple team engagements to share adversarial tactics, techniques, and procedures, and validate detection and response in real time
• Conduct offensive security assessments on internal and external networks, cloud infrastructure, wireless systems, and endpoint devices
• Perform security assessments including assumed breach scenarios, adversary emulation and simulation, threat-based evaluation, and continuous security validation
• Design and conduct security testing of AI-powered system and technology, including MLOps pipeline and AI/LLM applications
• Support information security projects by researching, documenting, and assisting with the implementation of security solutions
• Leverage threat intelligence sources to simulate emerging security threats and advanced threat actor TTPs

Skills

• Minimum 3 years of hands-on experience in advanced Red Team operations and penetration testing
• B.S. in Computer Science, Engineering, or similar technical program
• Proven ability to bypass advanced security defenses and malware development
• Demonstrate proficiency in at least one programming or scripting language (Python, C/C++, C#, Bash, Rust, PowerShell)
• Strong understanding of Active Directory and cloud engineering concepts (AWS, Azure, GCP, etc.)
• Strong understanding of security operations concepts such as adversary TTPs, perimeter defense, insider threat, kill-chain analysis, risk assessment, and security metrics
• Ability to self-organize, prioritize activities independently, create documentation, and reporting
• Ability to interface with business and technology stakeholders to explain complex security concepts in a simplified manner
• At least one of the preferred security certifications: OSCP, GPEN, CRTO, CRTP, or related
• Experience in building AI-assisted security automation tools
• Experience in security evaluation of AI-powered applications and infrastructure
• Experience in conducting cloud (AWS, Azure, GCP, etc.) and container security assessments
• Experience in payload and malware development for red team operations
• Experience with CTF (Capture the Flag) competitions or educational platforms such as Hack the Box, etc

Company Overview