Senior Red Team Operator – Social Engineering Focus

🔥 3 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Hexens

WebsiteLinkedInAll Job Openings

51 - 200 employees

🔒 Cybersecurity

🌐 Web 3

💰 Seed Round on 2022-10

Cybersecurity • Web 3

Hexens is a cybersecurity consulting company specializing in securing digital assets and data with innovative solutions. The company is renowned for its 360º cybersecurity platform, equipped with cutting-edge technology designed to reshape Web3 security. Hexens offers a range of services, including smart contract audits, blockchain security, penetration testing, and compliance advisory. The firm is trusted by leading organizations for its deep knowledge, attention to detail, and unique approach to cybersecurity challenges. Hexens is particularly focused on providing a superb customer experience and ensuring the highest quality security for digital assets, especially in the Web3 space.

📋 Description

• Plan and execute red team and adversary simulation engagements across enterprise, cloud, financial, and web3 environments. • Run social engineering campaigns as an initial-access vector: phishing, spear phishing, pretexting, and vishing, including executive-level targeting. • Carry engagements through post-access: lateral movement, privilege escalation, persistence, and objective completion. • Deploy and manage C2 infrastructure and supporting tooling. • Perform security control validation and evasion (firewall, proxy, DLP, EDR). • Conduct web application and network penetration testing as part of broader engagements. • Write clear, client-ready findings and remediation guidance. • Lead engagements independently when needed.

🎯 Requirements

• Proven red team / adversary simulation experience across multiple sectors. • Hands-on social engineering experience with a demonstrable track record (phishing, pretexting, executive-level testing). • Strong web application and network penetration testing skills. • Comfort with C2 deployment, control bypass, and standard post-exploitation techniques. • Ability to run an engagement solo, from scoping through reporting. • Clear written and verbal communication for client-facing deliverables. • Big plus if any of the following apply: Experience building phishing simulation and security awareness training programs. • Crypto / web3 or smart contract engagement experience. • Bug bounty track record (e.g. Bugcrowd, HackerOne). • Relevant certifications such as OSCP, CRTO, or OSCE3. • Conference talks or published research.