Cyber Security Expert - Red Teamer

How your role will add to the story

As a Red Team Operator, you will plan and execute realistic adversary emulation and full kill-chain operations against our own systems and networks in IT/OT and cloud environments. You will work closely with detection and response teams to improve detection coverage and capabilities.

Responsibilities

• Red Team engagements — 60%: Lead or support engagements across the full kill chain, including initial access, lateral movement, privilege escalation, persistence, and impact.
• Collaborate with detection engineering and incident response teams to test and iterate whether specific TTPs are detected.
• Deliver technical debriefs and “so-what” walkthroughs explaining what was exploited and why it matters.
• Leverage the BAS framework to replay and validate results.
• Employ and develop agents and LLMs to accelerate tool development and attack capabilities.
• Research and tooling — 30%: Research, develop, or modify tooling, exploits, and payloads to subvert detections.
• Build and maintain team infrastructure, internal tooling, and automation for pre- and post-exploitation workflows.
• Conduct research into evasion techniques, EDR internals, and emerging exploitation methods.
• Team support — 10%: Attend and represent the team at conferences and training, support onboarding, and evaluate new security solutions.

Qualifications

• Post-secondary degree related to cybersecurity or equivalent experience.
• 3–6+ years of experience in red or purple teams, with exposure to security operations, threat hunting, incident response, or detection engineering.
• Deep Windows Active Directory exploitation and lateral movement knowledge.
• Working fluency across Windows, macOS, and Linux/Unix internals.
• Cloud platform experience with AWS, Azure, and/or GCP, including IaaS/PaaS and container attack surfaces.
• Familiarity with OT environments, including ICS/SCADA protocols, Purdue model segmentation, engineering workstations, and safety instrumented systems.
• Programming and scripting proficiency in Python, Bash, PowerShell, C, or similar languages.
• Experience leveraging agents and LLMs to develop tooling or execute attacks.
• Strong written and verbal communication skills and a collaborative, innovative approach.

Preferred certifications include OSCP, OSEP, OSCE/OSED, CRTO/CRTL, GPEN, GXPN, GCFA, and GCIH.

Benefits

• Commitment to inclusion and diversity
• Training, development, and career growth opportunities
• Work-life balance benefits
• Comprehensive health, dental, and pension programs
• State-of-the-art working facilities
• Vehicle purchase and experience programs

Mercedes-Benz Canada is committed to fostering an inclusive, equitable, and accessible environment. Accommodation requests can be directed to mbcrecruitment@mercedes-benz.ca.