Security Researcher - Red Team

• Design and execute advanced red team exercises, simulating APT-style attacks across cloud-native applications, APIs, and services.
• Perform deep vulnerability analysis and logic assessments across multi-cloud environments.
• Identify cloud-specific misconfigurations and lateral movement vectors in AWS, GCP, and Azure.
• Develop and refine custom tools, scripts, and payloads using Python, TypeScript, and other languages.
• Leverage frameworks and tools such as Metasploit, Cobalt Strike, Mimikatz, Burp Suite, and BloodHound.
• Maintain a Persistent Penetration Testing Network (PPTN) for continuous evaluation.
• Conduct social engineering campaigns (phishing, pretexting) to assess user susceptibility.
• Collaborate with Engineering and DevSecOps to support secure product design and architecture.
• Provide clear, actionable reporting for both technical and executive audiences.
• Partner with SOC and detection teams to validate and improve detections and response coverage.
• Participate in security reviews, threat modeling, and design consultations.
• Mentor teammates on offensive techniques, cloud attack surface, and tool development.

• You have 5+ years of experience in offensive security, red teaming, or application penetration testing.
• You're proficient in testing cloud-native systems, web applications, and APIs.
• You understand the OWASP Top 10, business logic flaws, and secure application design.
• You have strong scripting or development skills in Python, Bash, or JavaScript.
• You bring deep knowledge of cloud environments (AWS, GCP, Azure) and their security controls.
• You're familiar with attack chains, lateral movement, IAM misconfigurations, and post-exploitation tactics.
• You've used tools like Burp Suite, Metasploit, BloodHound, or custom red team tooling.
• You can translate complex findings into clear, actionable documentation and recommendations.

• Certifications like OSCP, OSCE, OSEP, or cloud security credentials (e.g., AWS Security Specialty).
• Experience in mobile app security testing (iOS/Android).
• Exposure to DevSecOps practices or CI/CD integration.
• Background in consulting or client-facing security roles.

Mploy