Senior Red Team Operator – Social Engineering Focus

🕒 July 22

🌏 Anywhere in the World

⏰ Full Time

🟠 Senior

🖥 Software Engineer

👻 Ghost score 18%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Hexens

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

📣 Marketing

🔒 Cybersecurity

💰 Seed Round on 2022-10

Consulting • Marketing • Cybersecurity

Hexens is a cybersecurity consulting company specializing in securing digital assets and data with innovative solutions. The company is renowned for its 360º cybersecurity platform, equipped with cutting-edge technology designed to reshape Web3 security. Hexens offers a range of services, including smart contract audits, blockchain security, penetration testing, and compliance advisory. The firm is trusted by leading organizations for its deep knowledge, attention to detail, and unique approach to cybersecurity challenges. Hexens is particularly focused on providing a superb customer experience and ensuring the highest quality security for digital assets, especially in the Web3 space.

📋 Description

• Plan and execute red team and adversary simulation engagements across enterprise, cloud, financial, and web3 environments. • Run social engineering campaigns as an initial-access vector: phishing, spear phishing, pretexting, and vishing, including executive-level targeting. • Carry engagements through post-access: lateral movement, privilege escalation, persistence, and objective completion. • Deploy and manage C2 infrastructure and supporting tooling. • Perform security control validation and evasion (firewall, proxy, DLP, EDR). • Conduct web application and network penetration testing as part of broader engagements. • Write clear, client-ready findings and remediation guidance. • Lead engagements independently when needed.

🎯 Requirements

• Proven red team / adversary simulation experience across multiple sectors. • Hands-on social engineering experience with a demonstrable track record (phishing, pretexting, executive-level testing). • Strong web application and network penetration testing skills. • Comfort with C2 deployment, control bypass, and standard post-exploitation techniques. • Ability to run an engagement solo, from scoping through reporting. • Clear written and verbal communication for client-facing deliverables. • Big plus if any of the following apply: Experience building phishing simulation and security awareness training programs. • Crypto / web3 or smart contract engagement experience. • Bug bounty track record (e.g. Bugcrowd, HackerOne). • Relevant certifications such as OSCP, CRTO, or OSCE3. • Conference talks or published research.