01Overview
Red Team tools: Kali Linux, Cobalt Strike, Metasploit, Empire, Sliver, BloodHound 2. Solid understanding of Windows/Linux internals, AD, identity attacks 3.
Scripting: Python, PowerShell, Bash 4.
Certifications preferred: OSCP, CRTO, CEH, GWAPT 5. Reporting and risk communication skills
Conduct authorized red teaming exercises that emulate threat actors targeting enterprise settings, cloud, identity, endpoints, applications, and networks.
Simulate realistic attack scenarios.
Assess the effectiveness of preventive and detective controls 4. Evaluate blue team / SOC readiness against simulated attacks.
Identify exploitable weaknesses in systems, applications, identities, and configurations.
Perform controlled exploitation only within approved scope.
Prioritize issues based on attack feasibility and business impact.
Map attack paths that an adversary could use to reach critical assets. Test the scenarios based on business impact driven objectives.
Work closely with Incident Response, Detection Engineering, and Platform teams to improve defensive capabilities.
Support purple team exercises to tune detections and strengthen response playbooks.
Improve internal methodologies, playbooks, and automation for red team operations 12. Manager ensures flow of information required between team members happens 13. Define the responsibilities of the team members and their interdependencies. .
