Job Description

We are seeking an experienced Red Team Consultant to support a cybersecurity engagement focused on evaluating an organization's security posture through advanced Red Team exercises. The consultant will simulate real-world cyberattacks against internal applications and infrastructure to assess the effectiveness of detection, response, and security controls.

This role requires hands-on experience in offensive security, including Red Team operations, penetration testing, vulnerability assessments, Purple Team engagements, wireless security testing, physical security assessments, and social engineering. The ideal candidate is highly technical, capable of working independently or as part of a team, and experienced in emulating sophisticated threat actors.

Note: Due to the nature of the engagement, all internal application testing will be performed during overnight hours.

Key Responsibilities

• Plan and execute Red Team engagements that emulate realistic threat actor behaviors.
• Conduct reconnaissance and intelligence gathering to identify potential attack vectors.
• Design and execute attack scenarios aligned with real-world adversary techniques.
• Perform penetration testing against internal infrastructure, servers, and web applications.
• Execute lateral movement, privilege escalation, and data exfiltration activities.
• Identify and exploit vulnerabilities across web applications and internal environments.
• Simulate advanced attack techniques, including command-and-control (C2) communications, persistence mechanisms, and ransomware scenarios in controlled environments.
• Participate in Purple Team exercises to validate and improve detection and response capabilities.
• Conduct vulnerability assessments, wireless security assessments, physical security assessments, and social engineering engagements as required.
• Document findings, technical evidence, and provide actionable remediation recommendations.

Required Qualifications

• Proven experience in Red Team operations, Offensive Security, or advanced Penetration Testing.
• Strong knowledge of Windows and Linux operating systems.
• Experience performing:
  • Red Team Assessments
  • Penetration Testing
  • Vulnerability Assessments
  • Lateral Movement
  • Privilege Escalation
  • Data Exfiltration
  • Web Application Security Testing
  • Social Engineering Assessments
• Solid understanding of enterprise networking, Active Directory, authentication mechanisms, and attack methodologies.
• Experience using offensive security tools and frameworks.
• Ability to work independently while collaborating effectively with technical teams.
• Fluent English (written and spoken).
• Must be a Mexican National.
• Availability to work overnight during the project.

Preferred Qualifications

• OSCP (Offensive Security Certified Professional) certification strongly preferred.
• Additional offensive security certifications such as OSEP, CRTO, CRTP, PNPT, or equivalent are a plus.

Project Details

• Contract Duration: Approximately 15 days.