Senior Red Team Operator - Social Engineering Focus

Hexens is looking for a Senior Red Team Operator with a strong focus on social engineering to join our team. We deliver full-scope adversary simulations against some of the hardest targets out there, spanning banks, crypto and web3 platforms, and industrial environments. We address complex security challenges, replicating real-world attackers to prove impact against the applications and infrastructures our clients rely on.

Remote Availability: Work from anywhere! This is a fully remote role with no location restrictions.
Responsibilities:

- Plan and execute red team and adversary simulation engagements across enterprise, cloud, financial, and web3 environments.

- Run social engineering campaigns as an initial-access vector: phishing, spear phishing, pretexting, and vishing, including executive-level targeting.

- Carry engagements through post-access: lateral movement, privilege escalation, persistence, and objective completion.

- Deploy and manage C2 infrastructure and supporting tooling.

- Perform security control validation and evasion (firewall, proxy, DLP, EDR).

- Conduct web application and network penetration testing as part of broader engagements.

- Write clear, client-ready findings and remediation guidance.

- Lead engagements independently when needed.

Required skillset:

- Proven red team / adversary simulation experience across multiple sectors.

- Hands-on social engineering experience with a demonstrable track record (phishing, pretexting, executive-level testing).

- Strong web application and network penetration testing skills.

- Comfort with C2 deployment, control bypass, and standard post-exploitation techniques.

- Ability to run an engagement solo, from scoping through reporting.

- Clear written and verbal communication for client-facing deliverables.

Big plus if any of the following apply:

- Experience building phishing simulation and security awareness training programs.

- Crypto / web3 or smart contract engagement experience.

- Bug bounty track record (e.g. Bugcrowd, HackerOne).

- Relevant certifications such as OSCP, CRTO, or OSCE3.

- Conference talks or published research.

Originally posted on Himalayas