Mid-Level Ethical Hacker / Pentester (2+ yrs)

About the role

Insight Assurance is looking for a skilled Red Team Operator to join its cybersecurity team. You will simulate advanced persistent threats, conduct adversarial assessments, and help improve the organization’s security posture by working closely with blue‑team colleagues.

Key responsibilities

• Plan and execute realistic attack scenarios that mimic the tactics, techniques, and procedures (TTPs) of sophisticated threat actors.
• Design and deliver red‑team engagements covering physical, social‑engineering, and cyber‑attack components.
• Perform penetration testing of networks, applications, and systems using tools such as Burp Suite, Metasploit, Cobalt Strike, and custom scripts.
• Bypass defensive controls (IDS/IPS, firewalls, EDR, WAF) and exploit vulnerabilities to gain and elevate privileges while remaining undetected.
• Prepare detailed reports documenting findings, attack vectors, and remediation recommendations; present results to technical and non‑technical stakeholders.
• Collaborate with blue‑team members to refine detection, response, and threat‑hunting capabilities.
• Stay current on emerging attack techniques, vulnerabilities, and defensive countermeasures; develop new tools and exploits.

Required profile

• Minimum 2 years of experience in offensive security, penetration testing, or red‑team operations.
• Strong knowledge of Windows and Linux systems, Active Directory, and cloud platforms (AWS, Azure, GCP).
• Familiarity with modern TTPs and the MITRE ATT&CK framework.
• Relevant certifications preferred (OSCP, OSCE, GPEN, etc.).

Required skills

• Python
• PowerShell
• Bash
• Burp Suite
• Metasploit
• Cobalt Strike
• Custom scripting
• IDS/IPS evasion
• Firewall bypass
• EDR evasion
• WAF bypass