07/15/2026 updated

FM
100 % available

Senior Red Team Operator | Adversary Simulation | EDR Bypass | Cloud Security

Dartford, United Kingdom
Worldwide
Bachelor of Agriculture (Crop Science)
Dartford, United Kingdom
Worldwide
Bachelor of Agriculture (Crop Science)

Profile attachments

felixmeggison_March2026.pdf

Penetration TestingCloud Computing SecurityRed Team (Cyber Security)Purple Team (Cyber Security)Blue Team (Cyber Security)
Red Teaming & Adversary Simulation
End-to-end operation planning and execution including phishing, C2 setup, lateral movement, and domain takeover across financial services and multinational environments.

EDR Evasion & Custom Tooling
Development of AV/EDR-resistant implants using C/C++ and shellcode delivery mechanisms, enabling undetected operations against mature blue teams.

Cloud Security
Azure red teaming, GCP and AWS attack simulation, and hybrid cloud assessments, including cloud configuration reviews and cloud-based infrastructure setup.

Detection Engineering Support
Purple team collaboration, SIEM rule validation, and SOC capability uplift to translate offensive outcomes into measurable defensive improvements.

Infrastructure & Automation
Red team infrastructure setup including C2 redirectors and Team Servers, cloud-based lab setup, and automation scripting using Python, Bash, and PowerShell.

Client Engagement & Leadership
Technical mentorship, pre-sales, scoping, budget planning, and stakeholder reporting for complex security engagements.

Penetration Testing
Infrastructure and web application penetration testing, phishing assessments, OS build reviews, network device hardening reviews, and Cyber Essentials Plus assessments.

Programming Languages
Proficiency in C, C++, C#, Python, Bash, PowerShell, VBA, and HTML/CSS for offensive tooling development and automation.

Security Tools
Hands-on experience with Havoc, Cobalt Strike, BloodHound, NetExec, Outflank, Core Impact, Nessus, and Burp Suite across multiple engagements.

Threat Intelligence & Incident Response
Threat intelligence reporting, tracking of cybercriminal campaigns, SIEM monitoring, phishing incident investigation, and DLP and network access control enforcement.

Experience

Professional experience5 - 10 years
Freelancer since2019

Languages

EnglishNative speaker

Project history

Associate Director, C&ORC Cyber Assurance Tester (Red Team Operator)

UBS (London)
Conducted adversary simulation in a highly instrumented financial environment, successfully operating without triggering detection across multiple engagements. Led full-scope red team operations across global infrastructure, achieving access and persistence without blue team detection. Developed tooling and methodologies supporting enumeration, initial access, and lateral movement. Delivered high-quality technical and executive-level reporting to business stakeholders with actionable remediation. Maintained and improved red team infrastructure and licensing.

Red Team Operator

AVEVA (London)
Built and maintained red team infrastructure in Microsoft Azure using Kali, Cobalt Strike, Core Impact, Nessus, and Outflank. Developed custom C2 implants in C to bypass AV and EDR solutions across multiple engagements. Supported purple team activities, improving SOC detection capabilities and fine-tuning SIEM rules. Delivered detailed post-op technical reports with actionable recommendations.

Senior Security Consultant (Penetration Tester)

Crossword Cybersecurity PLC (London)
Performed red team assessments and delivered reporting to C-level stakeholders. Conducted infrastructure and web application assessments, OS build reviews, and cloud config reviews (Azure, Dynamics 365, AWS). Built and managed red team infrastructure, team servers, redirectors, and custom toolkits. Created and maintained red team methodology, internal testing frameworks, and delivery documentation. Led project scoping, technical reviews, budgeting, and client communications for complex engagements.

Security Consultant (Penetration Tester)

Protection Group International (PGI) London
Delivered infrastructure and web app penetration testing, phishing assessments, and Cyber Essentials Plus assessments. Reviewed OS builds and network devices (firewalls, routers, WLAN controllers) for hardening gaps. Scoped and delivered quality-assured technical assessments across multiple industries.

Cyber Security Analyst

Stanbic IBTC Bank (Standard Bank Group)
Managed enterprise MFA rollout, endpoint security controls, and AD policy enforcement across 4,000+ systems. Investigated phishing incidents and enforced DLP and network access controls. Assisted security ops and incident response through SIEM monitoring and threat analysis.

Associate Cybersecurity Analyst

DIGISS LLC
Delivered threat intelligence reporting and tracking of cybercriminal campaigns. Monitored threat actor activity and supported internal SIEM analysis and infrastructure hardening.

Contact form

Log in to get in touch

You need to be logged in to use the contact form.

Sign upLog in