> Markdown version of [/jobs/ext/2817916-senior-consultant-red-team-offensive-security](https://www.wearedevelopers.com/jobs/ext/2817916-senior-consultant-red-team-offensive-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Consultant, Red Team, Offensive Security - **Company:** Kroll, LLC - **Location:** London, UK (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** C (Programming Language), JavaScript (Programming Language), Microsoft Windows, Active Directory, Amazon Web Services, Microsoft Azure, C Sharp (Programming Language), Cloud Computing, Cloud Computing Security, Cloud Engineering, Software Debugging, Linux, DevOps, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Network Monitoring, Windows PowerShell, Azure Active Directory, Phishing, Red Team (Cyber Security), Reverse Engineering, Security Information and Event Management, TCP/IP, Computer Networking Systems, Google Cloud, Malware, Cyber Threat Analysis, SC Clearance, Kubernetes, Purple Team (Cyber Security), Docker - **Published:** September 10, 2026 - **Apply:** https://www.collegerecruiter.com/job/2840577977-senior-consultant-red-team-offensive-security ## About the Role * 5+ years in offensive cybersecurity, including experience delivering red team, purple team, adversary emulation, or assumed-breach engagements * Existing SC clearance, or the ability and willingness to obtain SC clearance * A relevant CREST red team certification aligned to CBEST-style delivery, such as CREST Certified Red Team Specialist, formerly CCSAS, or the ability to obtain this within the probation period * Strong experience with Windows enterprise environments, Active Directory exploitation, privilege escalation, and lateral movement * Experienced and comfortable with performing social engineering techniques in support of red team operations, including email and voice phishing * Experience operating command-and-control frameworks such as Mythic, Cobalt Strike, or similar tooling in authorised client engagements * Experience developing, modifying, or extending offensive security tooling, scripts, or payloads * Working knowledge of at least one of C, C#, Python, PowerShell, and/or JavaScript, to support offensive security objectives * Practical understanding of evasion techniques, endpoint security controls, operational security, and detection-aware tradecraft * Strong understanding of networking and web protocols, including TCP/IP, DNS, HTTP, HTTPS, and authentication flows * Experience conducting reconnaissance, attack path development, and objective-based testing * Excellent written and verbal communication skills, with the ability to explain complex technical issues clearly to technical and non-technical audiences * The ability to manage risk during live client engagements and operate within agreed rules of engagement * Work remote, but have the ability to come into the office at either London, Leeds, or Birmingham, on occasion for team building or administration, * CREST Certified Red Team Specialist, OSEP, OSCE3, CRTO, CRTL, GPEN, GXPN, or equivalent experience * Experience delivering CBEST, STAR-FS, TIBER, DORA-aligned, TLPT, or regulated financial-sector red team engagements * Strong working knowledge of Microsoft Entra ID, Microsoft 365, and hybrid identity attack paths * Working knowledge of cloud platforms such as AWS, Azure, or GCP, including identity, privilege escalation, misconfiguration abuse, and cloud-native attack paths * Experience with exploit development, reverse engineering, malware analysis, or assembly-level debugging * Experience with macOS or Linux endpoint tradecraft * Experience with Kubernetes, Docker, CI/CD platforms, DevOps environments, or containerised workloads * Experience with physical security * Experience with employing modern AI tooling to support offensive engagements * Threat intelligence, detection engineering, or incident response experience * Experience writing blogs, presenting at industry events, publishing research, or contributing to offensive security tooling * Experience leading small teams or technical workstreams during complex offensive security engagements ## Description As a Senior Consultant, Red Team Operator, you will support the delivery of complex red team, purple team, assumed-breach, and adversary emulation engagements. You will work with clients to understand their environments, help define realistic attack objectives, develop attack paths, and execute authorised offensive security activity within agreed rules of engagement. You will be expected to operate across a range of attack surfaces, including enterprise networks, Active Directory, Microsoft Entra ID, Microsoft 365, cloud platforms, endpoints, externally exposed services, and, where authorised, social engineering scenarios. You will also help clients understand the business impact of identified attack paths and provide clear, actionable recommendations to improve prevention, detection, and response., * Deliver red team, purple team, assumed-breach, and adversary emulation engagements for clients across multiple sectors * Support engagement planning, including threat-informed scenarios, attack objectives, rules of engagement, operational security considerations, and success criteria * Execute hands-on offensive activity across enterprise environments, including Active Directory exploitation, credential access, privilege escalation, lateral movement, and objective-based testing * Assess and exploit attack paths across Microsoft Entra ID, Microsoft 365, hybrid identity environments, AWS, Azure, GCP, and other cloud platforms, where in scope * Build, adapt, and operate red team infrastructure, command-and-control tooling, payloads, and scripts during authorised client engagements * Apply detection-aware tradecraft and understand how EDR, SIEM, identity protection, conditional access, email security, and network monitoring can affect red team operations * Support purple team engagements by executing agreed TTPs, working with client security teams, validating detection logic, and helping clients improve response capability * Conduct authorised social engineering activity, including reconnaissance, phishing, vishing, pretext development, and controlled initial access scenarios * Conduct research and development to improve Kroll's red team tooling, tradecraft, methodology, and reporting * Produce clear, evidence-based reporting that explains attack paths, business impact, detection and response observations, and prioritised remediation actions * Present technical findings to security teams and communicate business risk to senior stakeholders * Mentor junior consultants, support technical delivery, and contribute to peer review and quality assurance * Work collaboratively with Kroll's wider Cyber Risk teams, including incident response, threat intelligence, cloud security, and detection engineering ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)