As a Red Teamer at SnappMarket, you will spearhead offensive security strategies and operations, ensuring the robustness of our systems against emerging threats. Collaborating closely with cross-functional teams, including security engineers, threat intelligence analysts, and incident responders, you will design and execute simulated adversarial attacks to uncover vulnerabilities. Your expertise will directly contribute to fortifying our security posture and safeguarding our organization against real-world threats. Additionally, you can shape our red team methodologies and mentor junior team members to foster a culture of excellence and innovation.

Responsibilities:

• Design, plan, and execute comprehensive red team engagements, including network, application, and physical security assessments.
• Emulate tactics, techniques, and procedures (TTPs) of threat actors to identify weaknesses in the organization’s defenses.
• Collaborate with security operations and incident response teams to test detection and response capabilities.
• Create realistic attack scenarios aligned with industry threat models (e.g., MITRE ATT&CK) and organizational risks.
• Identify and exploit vulnerabilities across a range of technologies, including networks, operating systems, cloud environments, APIs, and IoT.
• Document technical findings and deliver actionable recommendations to both technical and non-technical audiences.
• Research and develop novel tools, exploits, and methodologies to enhance the red team’s capabilities.
• Monitor emerging threats, vulnerabilities, and offensive security trends to keep red team practices cutting-edge.

Qualifications:

• Proven experience conducting red team operations or advanced penetration testing.
• Hands-on experience with adversary simulation tools and frameworks.
• Deep understanding of modern attack methodologies, TTPs, and offensive security tools (e.g., Cobalt Strike, Metasploit, Bloodhound, Empire).
• Proficiency in scripting and programming (e.g., Python, PowerShell, Bash, or C#).
• Strong knowledge of enterprise environments, including Windows, Linux, Active Directory, and cloud platforms (e.g., AWS, Azure, GCP).
• Ability to contribute Red Teaming and Advanced Intrusion Testing skills including design, development, and delivery of advanced adversarial techniques (e.g., social engineering, AV/EDR evasion).
• Proficiency in exploit development, reverse engineering, and network protocols.
• Ability to think creatively and critically to solve complex security challenges.
• Excellent communication skills to convey technical findings to diverse stakeholders.