Hexens
Senior Red Team Operator (Social Engineering Focus)
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Description
Hexens is looking for a Senior Red Team Operator with a strong focus on social engineering to join our team. We deliver full-scope adversary simulations against some of the hardest targets out there, spanning banks, crypto and web3 platforms, and industrial environments. We address complex security challenges, replicating real-world attackers to prove impact against the applications and infrastructures our clients rely on.
Remote Availability: Work from anywhere! This is a fully remote role with no location restrictions.
Responsibilities:
- Plan and execute red team and adversary simulation engagements across enterprise, cloud, financial, and web3 environments.
- Run social engineering campaigns as an initial-access vector: phishing, spear phishing, pretexting, and vishing, including executive-level targeting.
- Carry engagements through post-access: lateral movement, privilege escalation, persistence, and objective completion.
- Deploy and manage C2 infrastructure and supporting tooling.
- Perform security control validation and evasion (firewall, proxy, DLP, EDR).
- Conduct web application and network penetration testing as part of broader engagements.
- Write clear, client-ready findings and remediation guidance.
- Lead engagements independently when needed.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Required skillset:
- Proven red team / adversary simulation experience across multiple sectors.
- Hands-on social engineering experience with a demonstrable track record (phishing, pretexting, executive-level testing).
- Strong web application and network penetration testing skills.
- Comfort with C2 deployment, control bypass, and standard post-exploitation techniques.
- Ability to run an engagement solo, from scoping through reporting.
- Clear written and verbal communication for client-facing deliverables.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Big plus if any of the following apply:
- Experience building phishing simulation and security awareness training programs.
- Crypto / web3 or smart contract engagement experience.
- Bug bounty track record (e.g. Bugcrowd, HackerOne).
- Relevant certifications such as OSCP, CRTO, or OSCE3.
- Conference talks or published research.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location