Staff Red Team Operator

NBCUniversal

Staff Red Team Operator simulating advanced cyber attacks for NBCUniversal's security posture. Collaborating with teams to identify vulnerabilities and improve defenses against threats.

Posted 7/16/2026full-timeRemote • New York • 🇺🇸 United StatesLead💰 $120,000 - $155,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Red Team engagements, including advanced attack simulations and collaboration with blue teams to enhance security postures. Proficient in developing and executing sophisticated attack scenarios while effectively communicating findings to diverse audiences.

Highest-signal resume keywords

Red Team EngagementsOffensive Cyber SecurityAdvanced Source Code AnalysisPenetration Testing MethodologiesMITRE ATT&CK Framework

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

JavaCC++C#ASP.NETPHPJavaScriptPythonObjective CBash

Soft Skills

Technical LeadershipCollaborationCommunication

Tools & Technologies

BurpSuiteMetasploitKaliSliverAircrack-ngMimikatzEmpireBloodhoundProxy ChainsSetoolkit

Industry Keywords

Cyber SecurityOSINTSocial EngineeringPhysical Security AssessmentsNetwork ProtocolsCloud EnvironmentsSecurity ArchitecturesData Breach TacticsAdversary TacticsSecurity Risks

Tech Stack

Tools & technologies

AndroidASP.NETAWSAzureCloudCyber SecurityGoogle Cloud PlatformiOSJavaJavaScriptLinuxMacOS.NETObjective-CPerlPHPPythonRubyTCP/IPUnix

About the role

Key responsibilities & impact

Perform Red Team engagements including Stealth and Purple Teaming either individually or in a team.
Simulate advanced cyber engagements to test the security posture of different businesses that make up the NBCUniversal ecosystem, in addition to developing and executing sophisticated attack scenarios to test detection and response capabilities.
Collaborate with blue team members in real time to identify and address security gaps
Summarize the engagement by including information regarding the target in scope, OSINT reconnaissance performed, actions taken, results, and recommendations and provide the reports and summaries on time.
Document testing progress, activity, and findings – compile technical reports and presentations for both technical and executive audiences
Remain up to date on current attack vectors and reach beyond common Red Team techniques used today.
Ability to adapt work schedule and availability based on engagement requirements.
Ability to travel for engagements if needed.
Ability to work with all audiences, including the internal team, clients, defense, stakeholders, etc. to explain and/or present vulnerabilities found during engagements and possible methods of mitigating them.
Provide technical leadership and advise junior team members on attacks and engagements across Red Teaming and Penetration Testing.
When necessary, assist penetration testing team with engagements unrelated to Red Teaming such as PCI, Bug Bounty, and application/product assessments.
May develop new strategies, processes, best-practices, and tools that contribute to our cyber security posture.

Requirements

What you’ll need

8+ years of experience in Defensive/Offensive Cyber Security
Strong experience with incorporating AI into Red Team engagements to decrease testing windows and locate more advanced attack paths.
Up-to-date knowledge of current security risks, data breach tactics, and cybersecurity incidents
Experience running end to end Red Team engagements and how to accomplish testing objectives with minimal system impact and avoid detection as needed.
Experience operationalizing new and expanding current Cyber services
Advanced experience in source code analysis or 1+ year coding in languages such as Java, C, C++, C#, ASP.NET, PHP, JavaScript, Python, Objective C, Android, Ruby, Perl, Bash, Powershell
Advanced experience with assessment tools such as BurpSuite, Metasploit, sliver, kali, setoolkit, aircrack-ng, mimikatz, eyewitness, empire, impacket, rubeus, proxy chains, bloodhound,
Heavy Experience in at least one of: Windows, Unix, Linux, MacOS, AWS, Azure, GCP, Cloud
Experience in iOS, Android
Advanced understanding of network protocols, operating systems, cloud environments, and security architectures including TCP/IP network protocols and experience with various AD attack techniques.
Ability to research and develop new techniques, tools, and methodologies for Red Teaming and its processes.
Experience with social engineering tactics and physical security assessments.
Understands adversary tactics, techniques, and procedures (TTPs) and the MITRE ATT&CK framework.
Advanced report building skills explaining actions taken and explaining start to finish how a full attack was accomplished in detail and in an easy-to-understand manner.
Reports contain all needed information and is rarely amiss.
Reports are easily ingestible towards all audience types.
Extensive knowledge of various penetration testing methodologies and frameworks.

Benefits

Comp & perks

medical, dental and vision insurance
401(k)
paid leave
tuition reimbursement
a variety of other discounts and perks