Senior Red Team Operator- VP

Barclays•Working From Home, NEW JERSEY, NJ

6d•$175,000 - $225,000•Remote

About The Position

The Senior Red Team Operator assesses and improves Barclays’ security posture by identifying, validating, and helping mitigate weaknesses across IT systems, applications, networks, and infrastructure. The role plans and delivers authorized offensive security engagements, audits, threat models, and full-scope adversary emulation exercises. These exercises may cover cyber operations, physical security, social engineering, processes, and technology, using realistic techniques to evaluate defenses, security controls, detection, and response capabilities. The operator develops custom tooling, offensive tradecraft, and defense-evasion techniques; researches and prototypes attack methodologies aligned with the evolving threat landscape; and communicates findings, risk impacts, and remediation guidance to technical, business, and senior stakeholders. The role also contributes to offensive security methodologies and assurance activities, maintains safe and controlled tooling and infrastructure, and provides technical expertise to incident investigation and remediation efforts. This is a hands-on work-from-home role with dedicated time for research into emerging tradecraft and tools, and collaboration with skilled operators and stakeholders. The position is eligible for an incentive award. The stated base salary range is $175,000 to $225,000.

Requirements

Hands-on experience in Red Team operations, security testing, or offensive security research.
Experience developing or enhancing custom tooling, offensive tradecraft, and defense-evasion techniques.
Experience researching, prototyping, and executing attack methodologies for adversary emulation.
Programming and scripting skills to build, customize, and automate tools.
Strong analytical thinking, creativity, and problem-solving skills, with the ability to adapt to dynamic environments and technical challenges.
Ability to work effectively across teams and communicate findings and recommendations to stakeholders.

Nice To Haves

Industry-recognized certifications such as OSCP, OSEP, CRTO, CRTP, CREST, CCSAS, CCRTS, or equivalent; certifications are described as a plus.
Experience with full-scope adversary emulation spanning cyber operations, physical security assessments, and social engineering engagements.

Responsibilities

Plan and deliver offensive security engagements, audits, threat models, and adversary emulation exercises across systems, applications, networks, infrastructure, and other relevant domains.
Identify vulnerabilities, adversary pathways, and control gaps; assess risk impact and provide actionable remediation recommendations.
Develop and enhance custom tooling, offensive tradecraft, and defense-evasion techniques to emulate sophisticated threat actors and evaluate security controls, detection, and response capabilities.
Research, prototype, and execute attack methodologies that advance adversary emulation and reflect the evolving threat landscape.
Communicate offensive security findings, risks, and remediation guidance to technical, business, and senior stakeholders.
Collaborate with stakeholders and technology teams to identify emerging attack techniques, tools, and technologies and improve offensive security methodologies, frameworks, and testing approaches.
Understand security requirements and existing controls across business processes, applications, and services to strengthen security posture and assurance.
Design and maintain offensive security tooling, infrastructure, and tradecraft for safe, controlled operations consistent with legal, ethical, and organisational requirements.
Support complex cybersecurity incident management by providing technical analysis, subject-matter expertise, and advisory input to IT, security operations, and incident response teams.
Contribute to strategy, requirements, recommendations for change, risk management, control governance, and continuous improvement.
Build and maintain relationships with internal and external stakeholders and advise key stakeholders on functional and cross-functional impacts.
Guide technical direction, collaborate on complex assignments, and train, guide, or coach less experienced specialists, as applicable.