Client Engagement and Relationship Management

•  Coordinate with Blue Team, SOC, IT, application, cloud, and infrastructure teams to validate findings and improve defensive capabilities.
•  Build and maintain trusted advisory relationships with clients and internal stakeholders to support long-term security improvement.

Documentation and Resource Management

• Ensure all engagement documentation is accurate, complete, consistent, and aligned with approved reporting standards.
•  Maintain Red Team playbooks, methodologies, attack scenarios, checklists, templates, and knowledge base content.
•  Ensure sensitive engagement data is securely stored, handled, shared, and disposed of in accordance with policy.
•  Track engagement progress, findings, remediation status, retesting activities, and closure evidence.
• Support planning and allocation of team members, tools, and technical resources based on engagement priorities and complexity.

Knowledge and Experience

•  Strong experience in Red Team operations, adversary simulation, offensive security, and penetration testing.
•  Proven experience in leading Red Team engagements, managing offensive security teams, and overseeing complex attack scenarios.
•  Solid knowledge of MITRE ATT&CK, threat actor tactics, real-world attack paths, and adversary emulation methodologies.
• Strong understanding of web, API, network, Active Directory, cloud, endpoint, and identity security.
•  Experience in evaluating security controls, SOC monitoring, SIEM, EDR, detection engineering, and incident response readiness.
•  Ability to translate technical findings into business risk, remediation priorities, and strategic security improvements.
•  Experience in stakeholder management, executive reporting, team mentoring, and cross-functional coordination.

Education and Certifications

• Minimum 2 years of relevant experience 
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Relevant offensive security certifications such as OSWE, OSEP, OSCP, CRTO, CRTE, GPEN, GWAPT, or equivalent are preferred.