Red Team Lead (Offensive Cybersecurity) remote

ESRhealthcare and EXEC STAFF RECRUITERS • Nyc, NY

2d • Remote

About The Position

This role involves developing comprehensive taxonomies for cyber-capability tasks and attack stages relevant to modern threat landscapes. The successful candidate will design and validate evaluation frameworks for offensive security, focusing on real-world scenarios involving exploit chains, malware, cloud/appsec, and social engineering. Responsibilities include creating safe and effective proxy tasks to simulate advanced attack vectors, formulating robust scoring rubrics to assess attack sophistication, coverage, and impact, and reviewing/critiquing benchmarks for red team operations. The role also requires producing clear, well-documented methodologies and technical write-ups, communicating complex security concepts to diverse audiences, and collaborating asynchronously with project stakeholders.

Requirements

• 5+ years of hands-on experience in offensive cybersecurity, red teaming, exploit development, or vulnerability research.
• Track record as a principal security engineer, exploit developer, cloud red-team lead, malware reverse-engineer, or security researcher specializing in attack chains or social engineering.
• Deep expertise in cyber attack methodologies, exploit chains, and cloud/application security assessments.
• Strong background in malware analysis, reverse engineering, and/or social engineering tactics and defenses.
• Demonstrated ability to produce clear, actionable written and verbal communication for a variety of audiences.

Nice To Haves

• 8–20 years of experience preferred for senior contributors.
• Advanced degree, relevant professional security certifications, or equivalent operational experience highly valued.
• Experience building benchmarking or evaluation frameworks in cybersecurity is a plus.

Responsibilities

• Develop comprehensive taxonomies for cyber-capability tasks and attack stages.
• Design and validate evaluation frameworks for offensive security.
• Create safe and effective proxy tasks to simulate advanced attack vectors.
• Formulate robust scoring rubrics to assess attack sophistication, coverage, and impact.
• Review, critique, and enhance benchmarks for red team operations.
• Produce clear, well-documented methodologies and technical write-ups.
• Communicate complex security concepts to both technical and non-technical audiences.
• Collaborate asynchronously with project stakeholders to iterate on frameworks and incorporate feedback.

What This Job Offers

• Career Level: Senior
• Education Level: No Education Listed