United States
2 months ago

Job Overview

Job Type
Full Time
Pay
Not disclosed

Job description

Location:
United States
Work arrangement:
Remote

Role Summary

Hexens is looking for a Senior Red Team Operator with a strong focus on social engineering to join our team. We deliver full-scope adversary simulations against some of the hardest targets out there, spanning banks, crypto and web3 platforms, and industrial environments. We address complex security challenges, replicating real-world attackers to prove impact against the applications and infrastructures our clients rely on.

Remote Availability: Work from anywhere! This is a fully remote role with no location restrictions.

Big plus if any of the following apply

Experience building phishing simulation and security awareness training programs.

Crypto / web3 or smart contract engagement experience.

Bug bounty track record (e.g. Bugcrowd, HackerOne).

Relevant certifications such as OSCP, CRTO, or OSCE3.

Conference talks or published research.

Responsibilities

  • Plan and execute red team and adversary simulation engagements across enterprise, cloud, financial, and web3 environments.
  • Run social engineering campaigns as an initial-access vector: phishing, spear phishing, pretexting, and vishing, including executive-level targeting.
  • Carry engagements through post-access: lateral movement, privilege escalation, persistence, and objective completion.
  • Deploy and manage C2 infrastructure and supporting tooling.
  • Perform security control validation and evasion (firewall, proxy, DLP, EDR).
  • Conduct web application and network penetration testing as part of broader engagements.
  • Write clear, client-ready findings and remediation guidance.
  • Lead engagements independently when needed.

Requirements

Required skillset

  • Proven red team / adversary simulation experience across multiple sectors.
  • Hands-on social engineering experience with a demonstrable track record (phishing, pretexting, executive-level testing).
  • Strong web application and network penetration testing skills.
  • Comfort with C2 deployment, control bypass, and standard post-exploitation techniques.
  • Ability to run an engagement solo, from scoping through reporting.
  • Clear written and verbal communication for client-facing deliverables.
Role:
Senior Red Team Operator - Social Engineering Focus
Job Type:
Full Time

Company profile

Hexens

hexens.io

Hexens is a blockchain security firm offering smart contract audits and offensive security services to protocols. It reports 300+ engagements with zero client exploits. Hexens also builds Glider, a technology for tagging and querying the logic of deployed smart contracts, letting users search on-chain code by function, pattern or behavior. With 32+ chains integrated, Glider provides token risk analysis and detects risks such as transfer fees and blacklists. Sipan Vardanyan is co-founder and CEO.

Founded
2021
Founders
Sipan Vardanyan, Vahe Karapetyan