Manager, Red Team Operator

Company Description

Would you like to effect global change within the world’s largest consulting organization? At Deloitte. 

Job Description

• Utilize expertise in AI and AI code development to conduct continuous development and improvement of Red Team capabilities to include agentic applications.
• Leading a small team of Red Team Operators in the planning, execution, and reporting of Red Team engagements around the globe.
• Ensuring adherence to the Rules of Engagement during every step of the Red Team engagements.
• Working closely with the Red Team Manager to constantly improve and evolve the Red Team
• Lead planning, execution, reporting, and or red team campaigns by
  • Performing Open-Source Intelligence Gathering against target networks, people, and technologies.
  • Find creative ways to obtain a foothold in a target network.
  • Deliver payloads and establish command and control
  • Move stealthily within target networks satisfying the campaign objectives while staying undetected.
  • Establish persistence, strategically tune long-haul beacons for maintaining footholds where necessary.
• Assist in the management of the Red Team Attack Network and the implementation of new tools and techniques to improve the team’s tradecraft.
• Share your research within the Deloitte Global Red Team community, and with the broader security organization, by writing blogs, speaking at conferences, or publishing code.
• Develop operational processes, field manuals, and attack methodologies to continuously improve the quality of engagements and knowledge sharing amongst the team.
• Ensure deliverables are of a quality nature, a campaign is only as good as the report delivered.

Qualifications

• Deep knowledge of AI technologies to include: AI code development and GenAi offensive security assessments.
• A passion for offensive security and Red Team operations, and a drive to stay up to date with modern attack techniques, public breaches, and new vulnerabilities.
• At least two years of Red Team experience.
• Experience with conducting open-source intelligence gathering against companies and their associate people, networks, and technologies.
• Experience with technologies like Windows and Azure Active Directory, WMI, WinRM, and the ability to script/program using PowerShell, C#, C, Python, Go, Nim, Bash for offensive purposes.
• Experience designing, building, maintaining, and utilizing covert C2 infrastructure in various cloud platforms and environments. Automation experience is a plus!
• Hands on experience working with tools like Cobalt Strike, Nighthawk C2, GoPhish, Bloodhound, Impacket, Mimikatz, Kekeo, Rubeus, socat and the Windows Sysinternals suite.
• Experience with modern payload obfuscation techniques.
• Excellent technical communication skills and fluency in written and spoken English as it is the primary language of the team.
• Relevant certifications such as OSCP, OSEP, OSED, OSEE, CRTP, CRTE, etc. are preferred.
• Self-motivated people who thrive on having the time and resources to dive into research or development work. 

Additional Information

Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.