Red Team Operator (Security Threat Hunting + Penetration Testing (Red Team))

Location: Remote (Colombia)
Duration: 12 Months
Employment Type: Contract
Experience: 3–5+ years
Industry: Cybersecurity / Offensive Security / Red Team Operations

Job Description

We are seeking a Red Team Operator for a 12-month remote contract based in Colombia. This role is ideal for an offensive security professional with 3–5 years of experience in red teaming, penetration testing, or adversary emulation who is passionate about simulating real-world cyberattacks to evaluate and strengthen enterprise security.

The Red Team Operator will plan and execute authorized adversary simulations, identify security weaknesses across enterprise environments, and collaborate closely with blue teams to improve detection and response capabilities. This position also offers the opportunity to leverage AI-enabled security workflows to enhance offensive security operations.

Required Qualifications

• 3–5 years of professional experience in Red Teaming, Penetration Testing, Offensive Security, or Adversary Emulation.
• Hands-on experience conducting enterprise offensive security assessments.
• Strong understanding of MITRE ATT&CK and modern adversary tactics, techniques, and procedures.
• Experience with:
• Windows, Linux, and Active Directory
• Enterprise networking and authentication systems
• Web application security
• Command-and-control frameworks
• Privilege escalation and post-exploitation
• Cloud environments (AWS, Azure, or GCP)
• Experience operating red team infrastructure including domains, DNS, TLS certificates, VPNs, proxies, cloud infrastructure, and infrastructure-as-code.
• Strong scripting/programming skills in one or more of:
• Python
• PowerShell
• Bash
• C#
• Go
• C/C++
• JavaScript
• Experience working with EDR, SIEM, logging platforms, and security monitoring technologies.
• Strong communication skills with the ability to present technical findings to both technical and non-technical stakeholders.

Qualifications

• Experience with cloud identity platforms, SSO, MFA, and privileged access management.
• Familiarity with AI-assisted offensive security, LLM integrations, agent security, RAG security, prompt injection testing, or AI application assessments.
• Experience with phishing infrastructure, social engineering, and payload delivery.
• Knowledge of Infrastructure-as-Code, containers, and cloud-native environments.