Remote Jobs RockRemote Jobs Rock

SafetyTech Client #1 | Enterprise Red Teaming

🔥 22 hours ago
Enterprise Red TeamingAdversary EmulationActive DirectoryKerberos
Apply Now

📜 Description

  • Review cybersecurity prompts an AI system cannot confidently classify as benign or malicious.
  • Assess each prompt’s underlying intent, technical context, specificity, and potential to enable attackers.
  • Annotate prompts with intent labels and concise written rationales, following project guidelines.
  • Independently review prompts as a second researcher and escalate disagreements to a reviewer.
  • Flag ambiguous cases, emerging attack techniques, and guideline gaps; help improve the guidelines.

🛠️ Requirements

  • Minimum of 5 years of proven, hands-on experience in enterprise red teaming and adversary emulation
  • Deep knowledge of Active Directory attack paths, Kerberos abuse, credential access, lateral movement, and privilege escalation
  • Experience operating C2 frameworks (Cobalt Strike, Sliver, Mythic, Havoc) and building payloads and loaders that evade EDR/AV
  • Practical phishing and social engineering tradecraft, initial access techniques, and operational security (OPSEC)
  • Fluency with the MITRE ATT&CK framework and the ability to tell red team operations from real-world intrusion activity
  • Strong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation
  • Clear written communication in English, with the ability to document your reasoning concisely
  • OSEP, OSCP, CRTO
  • Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research.
Full job description

On behalf of SafetyTech Client #1, SD Solutions is looking for a highly motivated and technically proficient Enterprise Red Teaming to join our security research division.

SD Solutions is a staffing company operating globally. Contact us to get more details about the benefits we offer.

This role is dedicated to determining the true intent behind cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious, with a focus on enterprise red teaming.

You need to be independent, attentive to details, organized, eager to learn new things, and neager to research and solve complex problems.

Responsibilities:

  • Review cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious
  • Determine the underlying intent and goal behind each prompt, and assess whether the user is pursuing a legitimate purpose or an intent to cause harm
  • Apply deep domain expertise to judge the technical context, specificity, and real-world uplift a response would give an attacker
  • Annotate each prompt with an intent label and a clear written rationale, following the project guidelines
  • Independently annotate the same prompts as a second researcher; cases where researchers disagree are escalated to a reviewer
  • Flag ambiguous cases, emerging attack techniques, and gaps in the guidelines, and help improve them

Requirements:

  • Minimum of 5 years of proven, hands-on experience in enterprise red teaming and adversary emulation
  • Deep knowledge of Active Directory attack paths, Kerberos abuse, credential access, lateral movement, and privilege escalation
  • Experience operating C2 frameworks (Cobalt Strike, Sliver, Mythic, Havoc) and building payloads and loaders that evade EDR/AV
  • Practical phishing and social engineering tradecraft, initial access techniques, and operational security (OPSEC)
  • Fluency with the MITRE ATT&CK framework and the ability to tell red team operations from real-world intrusion activity
  • Strong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation
  • Clear written communication in English, with the ability to document your reasoning concisely

Nice to have:

  • OSEP, OSCP, CRTO
  • Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research.


About the company:

A company building specialized evaluation infrastructure for AI safety and robustness testing. Their platform simulates adversarial conditions used by AI development teams to validate agent behavior before deployment. Currently expanding a freelance contributor pool for scenario and environment development.

By applying for this position, you agree to the terms outlined in our Privacy Policy. Please take a moment to review our Privacy Policy https://sd-solutions.breezy.hr/privacy-notice, and make sure you understand its contents. If you have any questions or concerns regarding our Privacy Policy, please feel free to contact us.

Sophos

Threat Analyst

🕒 14 days ago
Sophos👥 1001 - 5000 employees🏢 Computer Software

Investigate, identify, and neutralize cyber threats as an MDR Threat Analyst, supporting 24/7 monitoring, detection, and response while guiding analysts and working with clients through threat resolution.

Security Operations Center (soc)Threat Detection And ResponseIncident ResponseEndpoint Security
EUROPEAN DYNAMICS

Security Officer

🕒 23 days ago
EUROPEAN DYNAMICS👥 501 - 1000 employees🏢 Technology

Develops and oversees information security, IT risk, and governance frameworks, guiding security strategy, compliance, assessments, and enterprise-wide initiatives while resolving complex security issues.

Information SecurityIT Risk ManagementIT GovernanceRisk Management

Analyze cyber threats to critical infrastructure, identify and validate organizational exposures, and deliver actionable intelligence and remediation guidance to operators, government partners, and ISACs.

Cyber Threat IntelligenceIncident ResponseOSINTExternal Attack-surface Discovery

Trusted by Remote Workers