Red Team Operator

Quick Facts

• Role: Red Team Operator

• Focus: Offensive security testing and red teaming of internal/external infrastructure

• Environment: Real production environment in public sector with regulated oversight

Description

The Red Team Operator will perform technical security tests against internal and external infrastructure by simulating realistic attack scenarios from phishing to privilege escalation and lateral movement. You will analyze vulnerabilities, collaborate with the blue team to tune detections and incident response, and build red team capabilities (methodologies, processes, and tools). Results must be reported and presented clearly to management.

Responsibilities

• Run security tests on internal and external infrastructure

• Simulate real-world attack scenarios (phishing, privilege escalation, lateral movement)

• Analyze and evaluate vulnerabilities

• Work with the blue team to improve detections and incident handling

• Develop red team methodologies, processes, and tooling

• Produce written reports and present findings to management

Requirements

• Experience from IT operations with an offensive way of thinking

• Strong network fundamentals (addressing, routing, segmentation, basic protocols)

• Ability to interpret vulnerability scan outputs and assess severity in context

• Understanding of the full attack lifecycle and ability to test internal/external infrastructure in a basic scope independently

• Knowledge of detection and reaction tools on network and endpoint levels (XDR/EDR) and attacker trace visibility

• Ability to perform OSINT research and evaluate what is externally visible

• Ability to understand and, if needed, adjust existing scripts or database queries

• Ability to write clear technical and management-ready reporting

Benefits

• Work in a real environment (no lab) within critical healthcare infrastructure

• Regulated, oversight-based setting with hands-on red team development