MissionHires is supporting our partner to hire a Red Team Consultant (Attack & Penetration) for up to 12 months on-site engagement with a major bank in Mexico City (CDMX). This role focuses on end-to-end red team operations—recon, design, execution, and reporting—evaluating internal networks, servers, detection/response, and real-world adversary simulation. Must be a Mexican national able to work on-site Monday–Friday, 8:00 AM–5:00 PM. Daily rate: $400 USD.

Responsibilities

- Conduct intelligence-driven reconnaissance to identify realistic threat pathways and targets

- Design and plan adversary emulation scenarios aligned to banking threat models

- Execute red team operations including initial access, lateral movement, privilege escalation, and data exfiltration

- Exploit web application vulnerabilities and deploy C2, web shells, and ransomware simulations (as scoped)

- Test internal network and server infrastructure; assess detection and response effectiveness against stealth techniques

- Perform vulnerability assessments, penetration tests, wireless security assessments, and physical/social engineering activities as required

- Simulate real-world attacks without prior knowledge of assets or architecture (black-box approach where applicable)

- Collaborate in daily stand-ups (10–15 min) and weekly syncs (30–60 min) for progress, next steps, and escalation

- Document findings, evidence, and remediation guidance; map outcomes to success indicators (“flags”)





- Adhere to rules of engagement, compliance requirements, and safety controls during testing

Requirements

- Mexican national; based in or able to work on-site in Mexico City (CDMX) Monday–Friday, 8:00 AM–5:00 PM

- Proven experience in red teaming, adversary emulation, and offensive security within enterprise environments (financial sector experience preferred)

- Hands‑on expertise with lateral movement, privilege escalation, data exfiltration, and stealth tradecraft (e.g., OPSEC, EDR evasion)

- Demonstrated ability to exploit web application vulnerabilities and operate C2 frameworks, web shells, and ransomware simulations

- Strong knowledge of Windows and Linux server operations, Active Directory, virtualization platforms, and internal network infrastructures

- Capability to conduct vulnerability assessments, penetration tests, wireless assessments, physical security tests, and social engineering

- Experience operating under strict rules of engagement with measurable success indicators (flags) such as data extraction/modification, service manipulation, inter-system operation injection, and virtualization control

- Clear, concise reporting and stakeholder communication in Spanish; ability to present findings and remediation steps

- Availability for up to 12‑month contract with daily and weekly status sessions

- Rate acceptance: $400 USD daily

#J-18808-Ljbffr

📌 Attack & Penetration Consultant (Red Team Consultant) - Ciudad de México, CDMX (Nezahualcóyotl)
🏢 MissionHires
📍 Nezahualcóyotl