Senior Red Team Analyst

Responsibilities

• Plan and implement full-scope Red Team engagements, including reconnaissance, exploitation, persistence, and lateral movement.
• Perform scenario-based and atomic testing aligned with the MITRE ATT&CK framework to emulate realistic adversary behaviors.
• Conduct targeted assessments across on-premises and cloud environments, specifically focusing on AWS.
• Utilize offensive tools and frameworks such as Burp Suite, BloodHound, and C2 frameworks to achieve objectives.
• Document technical findings with clear evidence, impact analysis, and actionable remediation guidance.
• Collaborate with Blue Team partners through Purple Team exercises to mature enterprise-wide detection and response capabilities.

Requirements

• 6+ years of offensive security experience, including Red Teaming, penetration testing, or adversary emulation.
• Deep understanding of Active Directory security concepts and attack paths (e.g., Kerberoasting, credential theft).
• Proficiency with common offensive tooling, including Kali Linux, Burp Suite, and C2 frameworks.
• Hands-on experience with AWS cloud environments, including IAM and networking configurations.
• Strong knowledge of the MITRE ATT&CK framework and adversary TTPs.
• Ability to write or modify scripts in Python, PowerShell, or Bash.

Benefits

• Flexible benefits including health and welfare insurance, retirement programs, and parental leave.
• Travel perks featuring weekly deals on flights, hotels, cruises, and car rentals.
• Professional development through access to over 20,000 courses on a dedicated learning platform.
• Inclusive culture with access to global INclusion Groups.

About the Company

Amex GBT is a global leader in travel management, where colleagues find inspiration in travel as a force for good. We offer an inclusive and collaborative culture designed to help our employees achieve success and make a meaningful impact on the travel and hospitality technology industry.