Offensive Security
Active Directory & Red Team Researcher
The Active Directory & Red Teaming Researcher is responsible for researching, simulating, and documenting adversary tradecraft in Windows and Active Directory environments.The role focuses on identifying misconfigurations, lateral movement paths, and privilege escalation vectors, while ensuring…
Role Overview
The Active Directory & Red Teaming Researcher is responsible for researching, simulating, and documenting adversary tradecraft in Windows and Active Directory environments.The role focuses on identifying misconfigurations, lateral movement paths, and privilege escalation vectors, while ensuring that findings translate into defensive improvements through purple teaming.
This role balances offensive depth with defensive responsibility, ensuring testing is safe, ethical, and detection-aware.
Key Responsibilities
- Research and simulate Active Directory attack paths using controlled lab and approved test environments.
- Identify misconfigurations related to authentication, delegation, trust relationships, and privilege assignments.
- Safely use tools such as BloodHound, PowerView, and credential abuse techniques with detection awareness.
- Collaborate with SOC and DFIR teams to:
- Improve detections
- Validate alerts
- Strengthen hardening guidance
- Develop playbooks, attack narratives, and training material for operational teams.
- Document steps, indicators, containment guidance, and remediation recommendations.
- Maintain structured documentation, runbooks, and research notes.
- Required Skills & Qualifications
- Core Technical Skills
- Active Directory internals
- Kerberos and LDAP
- Privilege escalation and lateral movement techniques
- Windows hardening and identity security
- Red & Purple Teaming
- Red team simulation methodologies
- Purple team collaboration and detection feedback
- Detection engineering concepts
- Tools & Techniques
- BloodHound, PowerView
- Controlled credential abuse techniques
- Documentation and runbook creatio
Mindset, Attitude & Behavior
- Curious, disciplined, and ethical researcher
- Strong bias toward measurable detection improvements
- Clear communicator under pressure
- High respect for legality, privacy, and organizational risk
- Willingness to continuously learn and adapt to evolving threats
Certifications
- Optional
Experience Level
- College students and freshers can start as Intern/Trainee; upon graduation and strong performance, convert to Fulltime. Experience equivalence: complete 2 years postconversion, and your prior trainee+internship is recognized as full 4 years company experience. Leaving earlier voids the equivalence.
What Success Looks Like
- Threats are detected earlier and more accurately
- Intelligence outputs are actionable and trusted
- DFIR cases are clean, defensible, and well-documented
- Detection coverage and response maturity improve measurably over time
Why Join Us
- Focused, high-impact engagement with clear deliverables
- Opportunity to apply privacy expertise in a real-world environment
- Direct collaboration with cross-functional stakeholders
- Application InstructionsSubject: AD & Red Teaming Researcher → [email protected]. Include a short lab writeup or detection improvement example.