Senior Red Team Analyst

American Express Global Business Travel

2d•$104,300 - $193,700•Onsite

About The Position

Amex GBT is seeking a Senior Red Team Analyst to join their newly established Red Team. This role is responsible for executing end-to-end adversarial assessments, controlled offensive security operations, and collaborative Purple Team exercises. The ideal candidate is a security professional with strong offensive security experience who is passionate about improving defensive capabilities, supporting Incident Response (IR), and strengthening enterprise-wide detection and response. The candidate will contribute by performing technical testing, analyzing complex environments, and collaborating with Blue Team partners to mature the cybersecurity posture across a global, highly distributed travel and hospitality technology enterprise.

Requirements

6+ years of offensive security experience, including Red Teaming, penetration testing, or adversary emulation.
Solid grasp of common offensive tooling (Kali toolset, Burp Suite, C2 frameworks, enumeration/exploitation tools).
Active Directory security concepts and charge paths (BloodHound, Kerberoasting, credential theft, etc.).
MITRE ATT&CK framework, and adversary TTP's.
Experience implementing end-to-end charges across diverse enterprise environments.
Hands-on experience with AWS cloud environments (IAM, networking, common configurations).
Ability to write or modify scripts in Python, PowerShell, or Bash.

Responsibilities

Plan and implement full-scope Red Team engagements, including reconnaissance, exploitation, persistence, lateral movement, and reporting.
Perform scenario-based and atomic testing aligned with MITRE ATT&CK to emulate realistic adversary behaviors.
Conduct targeted assessments across on-prem and cloud environments (primarily AWS, Azure a plus).
Use a variety of offensive tools, frameworks, and custom scripts to achieve objectives (e.g., Sliver, Cobalt Strike equivalents, Burp Suite, BloodHound, common Kali Linux tooling).
Document findings with clear evidence, impact analysis, and guidance.