Senior Red Team Operator- VP

Barclays•Working From Home, NE

6d•Remote

About The Position

Embark on a transformative journey as a Senior Red Team Operator - VP. At Barclays, our vision is clear –to redefine the future of banking and help craft innovative solutions. In this role, you’ll leverage industry-leading tools, explore emerging techniques, and execute operations across a wide range of domains, including cyber, physical, human, process, and technology. As a member of the Red Team, you’ll participate in full-scope adversary emulation exercises spanning cyber operations, physical security assessments, social engineering engagements, and everything in between, testing the resilience of our defenses under realistic conditions. You’ll identify vulnerabilities and control gaps, then work closely with stakeholders to help strengthen our security posture. This is a highly hands-on role, ideal for someone who thrives on tackling complex challenges, developing offensive security capabilities, and operating against sophisticated targets. You’ll have dedicated time to research emerging tradecraft, evaluate new tools and techniques, and collaborate with a team of skilled, highly motivated operators. Success in this role requires strong technical expertise, practical security testing experience, creativity in problem-solving, and the ability to work effectively across teams to achieve meaningful security outcomes.

Requirements

Develop and enhance custom tooling, offensive tradecraft, and defense-evasion techniques to emulate sophisticated threat actors and evaluate the effectiveness of security controls, detection, and response capabilities
Research, prototype, and execute innovative attack methodologies that advance adversary emulation capabilities and align with the evolving threat landscape
Demonstrate expertise in Red Team operations through hands-on security testing, offensive security research, and continuous development toward or attainment of industry-recognized certifications such as OSCP, OSEP, CRTO, CRTP, CREST, CCSAS, CCRTS, or equivalent
Leverage programming and scripting skills to build, customize, and automate tools that improve operational efficiency and support complex Red Team engagements
Apply strong analytical thinking, creativity, and problem-solving skills to navigate technical challenges, adapt to dynamic environments, and deliver impactful security testing outcomes
Develop and enhance custom tooling, offensive tradecraft, and defense-evasion techniques to emulate sophisticated threat actors and evaluate the effectiveness of security controls, detection, and response capabilities
Research, prototype, and execute innovative attack methodologies that advance adversary emulation capabilities and align with the evolving threat landscape
Demonstrate expertise in Red Team operations through hands-on security testing, offensive security research, any of these industry-recognized certifications such as OSCP, OSEP, CRTO, CRTP, CREST, CCSAS, CCRTS, are a plus
Leverage programming and scripting skills to build, customize, and automate tools that improve operational efficiency and support complex Red Team engagements
Apply strong analytical thinking, creativity, and problem-solving skills to navigate technical challenges, adapt to dynamic environments, and deliver impactful security testing outcomes
Risk and controls
Change and transformation
Business acumen
Strategic thinking
Digital and technology
Job-specific technical skills

Nice To Haves

Industry-recognized certifications such as OSCP, OSEP, CRTO, CRTP, CREST, CCSAS, CCRTS, or equivalent

Responsibilities

Plan and deliver offensive security engagements, audits and threat models to identify vulnerabilities and adversary pathways across the bank’s systems, applications, networks, and infrastructure using offensive security tools and techniques; and communicating actionable findings, risk impact, and remediation recommendations to technical and business stakeholders.
Collaborate with stakeholders and technology teams to identify emerging cyber-attack techniques, tools, and technologies, and to contribute to the continuous improvement of offensive security methodologies, frameworks, and testing approaches.
Develop and maintain clear, comprehensive documentation and reports for senior stakeholders, detailing offensive security findings, risk impact, and remediation guidance.
Collaborate with stakeholders to understand security requirements and existing controls across business processes, applications, and services, in order to enhance the organisation’s overall security posture and assurance.
Identify emerging vulnerabilities, exploit techniques, and cyber-attack trends to inform the development of offensive security testing methodologies and assurance activities.
Design and maintain offensive security tooling, infrastructure, and tradecraft, ensuring safe, and controlled operations aligned with legal, ethical, and organisational requirements.
Support the management of complex cybersecurity incidents by collaborating with information technology (IT), security operations, and incident response teams, providing technical analysis, subject-matter expertise, and advisory input to assist effective investigation and remediation efforts.
Develop and enhance custom tooling, offensive tradecraft, and defense-evasion techniques to emulate sophisticated threat actors and evaluate the effectiveness of security controls, detection, and response capabilities.
Research, prototype, and execute innovative attack methodologies that advance adversary emulation capabilities and align with the evolving threat landscape.
Demonstrate expertise in Red Team operations through hands-on security testing, offensive security research, and continuous development toward or attainment of industry-recognized certifications such as OSCP, OSEP, CRTO, CRTP, CREST, CCSAS, CCRTS, or equivalent.
Leverage programming and scripting skills to build, customize, and automate tools that improve operational efficiency and support complex Red Team engagements.
Apply strong analytical thinking, creativity, and problem-solving skills to navigate technical challenges, adapt to dynamic environments, and deliver impactful security testing outcomes.
Develop and enhance custom tooling, offensive tradecraft, and defense-evasion techniques to emulate sophisticated threat actors and evaluate the effectiveness of security controls, detection, and response capabilities.
Research, prototype, and execute innovative attack methodologies that advance adversary emulation capabilities and align with the evolving threat landscape.
Demonstrate expertise in Red Team operations through hands-on security testing, offensive security research, any of these industry-recognized certifications such as OSCP, OSEP, CRTO, CRTP, CREST, CCSAS, CCRTS, are a plus.
Leverage programming and scripting skills to build, customize, and automate tools that improve operational efficiency and support complex Red Team engagements.
Apply strong analytical thinking, creativity, and problem-solving skills to navigate technical challenges, adapt to dynamic environments, and deliver impactful security testing outcomes.
Advise key stakeholders, including functional leadership teams and senior management on functional and cross functional areas of impact and alignment.
Manage and mitigate risks through assessment, in support of the control and governance agenda.
Demonstrate leadership and accountability for managing risk and strengthening controls in relation to the work your team does.
Demonstrate comprehensive understanding of the organisation functions to contribute to achieving the goals of the business.
Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategies.
Create solutions based on sophisticated analytical thought comparing and selecting complex alternatives.
In-depth analysis with interpretative thinking will be required to define problems and develop innovative solutions.
Adopt and include the outcomes of extensive research in problem solving processes.
Seek out, build and maintain trusting relationships and partnerships with internal and external stakeholders in order to accomplish key business objectives, using influencing and negotiating skills to achieve outcomes.