Penetration Tester/Red Team Consultant

Job Description:

Job Title: Penetration Tester/Red Team Consultant

Location: Mexico City – CDMX, ONSITE

Duration: 1+ Month

Working Hours: Mon–Fri, 8:00 AM – 5:00 PM

Must be Mexican National

Sessions:

Daily (10–15 min): Activity review and next steps.

Weekly (30–60 min): Progress updates and issue escalation.

Overview:

Red team Consultant will evaluate current cybersecurity posture through a Red Team exercise, focusing on 3 core areas - Identifying vulnerabilities in internal network and server infrastructure testing detection and response capabilities against stealth attacks, and Simulating real-world threat scenarios without prior knowledge of assets or architecture. This position will work both independently, part of a team, and perform red team assessments, purple team assessments, vulnerability assessments, penetration tests, wireless security assessments, physical security assessments, and social engineering overall.

Requirements/Core Activities

1. Reconnaissance:

• Intelligence-based threat identification.

1. Design:

• Emulate realistic attack scenarios.

1. Execution:

• Perform lateral movement, privilege escalation, and data exfiltration.

• Exploit web application vulnerabilities.

• Deploy ransomware, C&C, and web shells.

1. Compliance:

• Achieve defined success indicators ("flags").

• Success Indicators ("Flags")

• Extract or modify data from a critical internal service.

• Stop or activate critical services on Windows/Linux servers.

• Inject unauthorized operations between critical systems.

• Gain control of virtualization infrastructure.