Senior Red Team Operator

Overview

Enovise deploys red team operators into some of the most sensitive offensive engagements across government, defence, and critical national infrastructure. This is not penetration testing. You will plan and execute full-spectrum adversary simulations — from initial access through to objective achievement — designed to expose systemic risk before real threat actors find it. You will operate with a high degree of autonomy, work alongside intelligence and DFIR teams, and be expected to deliver findings that drive strategic decisions at the highest levels.

Responsibilities

• Plan and lead end-to-end red team campaigns simulating advanced persistent threat actors across government and CNI environments.
• Develop and deploy custom implants, C2 infrastructure, and evasion techniques tailored to each target environment.
• Conduct OSINT, social engineering, and physical access operations as part of full-spectrum engagements.
• Collaborate with Cyber Fusion Centre teams to ensure findings are translated into actionable, operationally grounded recommendations.
• Produce executive and technical debrief materials with clarity and precision — findings must stand up to senior scrutiny.
• Mentor mid-level operators and contribute to internal tradecraft development and capability uplift.
• Maintain strict operational security throughout all engagements and protect client confidentiality absolutely.

Requirements

• 5+ years of hands-on offensive security experience, with at least 2 years leading red team engagements.
• Deep proficiency in Windows and Linux exploitation, Active Directory attack paths, and lateral movement techniques.
• Experience developing or modifying offensive tooling (C, C++, C#, Python, or Go).
• Demonstrable knowledge of MITRE ATT&CK framework and ability to map operations to real adversary TTPs.
• Strong written communication — capable of producing reports consumed by CISOs, boards, and government officials.
• Ability to obtain or hold security clearance at the required level for EMEA government engagements.
• OSCP, CRTO, CRTE, or equivalent certifications (or demonstrable equivalent operational experience).

Nice to Have

• Experience in physical red teaming, RFID cloning, and facility access operations.
• Prior work with national intelligence or defence agencies.
• Familiarity with ICS/SCADA environments and OT security concepts.
• Contribution to public security research, CVEs, or open-source offensive tooling.