Enterprise Red Teaming Analyst

About the role

SD Solutions, a global staffing company, is recruiting on behalf of a SafetyTech client for a full-time Enterprise Red Teaming analyst. The role sits in the security research division and focuses on determining the true intent behind cybersecurity prompts submitted to an AI system that could not confidently classify them as benign or malicious. The position is remote, based in Poland or Bulgaria.

Key responsibilities

• Review cybersecurity prompts submitted to an AI system that could not confidently classify them as benign or malicious.
• Determine the underlying intent and goal of each prompt and assess whether the user is pursuing a legitimate purpose or an intent to cause harm.
• Apply deep domain expertise to judge the technical context, specificity and real-world impact of a response for an attacker.
• Annotate each prompt with an intent label and a clear written rationale, following project guidelines.
• Annotate the same prompts independently as a second researcher; disagreements are escalated to a reviewer.
• Flag ambiguous cases, emerging attack techniques and gaps in the guidelines, and help improve them.

Required profile

• Minimum of 5 years of proven, hands-on experience in enterprise red teaming and adversary emulation.
• Independent, detail-oriented, organized, eager to learn and to research and solve complex problems.
• Clear written communication in English, able to document reasoning concisely.

Required skills

• Active Directory attack paths, Kerberos abuse, credential access, lateral movement and privilege escalation.
• C2 frameworks (Cobalt Strike, Sliver, Mythic, Havoc) and building payloads and loaders that evade EDR/AV.
• Phishing, social engineering, initial access techniques and OPSEC.
• MITRE ATT&CK framework.
• Nice to have: OSEP, OSCP, CRTOD, and demonstrated achievements or write-ups on HackTheBox, Pwn2Own, TryHackMe, bug bounty programs or published security research.