обновлено 1 день назад
Senior Red Team Operator (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Red Team Operator (Cybersecurity): Leading intelligence-led red team campaigns across on-premise, cloud, and hybrid enterprise environments with an accent on stealth, operational security, and custom offensive tooling. Focus on simulating advanced threat actors, developing C2 infrastructure and implants, bypassing EDR controls, and translating findings into defensive improvements.
Location: HBP, Amsterdam, Netherlands; hybrid work
Company
is a global financial institution with a Global CISO organisation responsible for enterprise cybersecurity and security strategy.
What you will do
- Lead complex, long-runn, intelligence-led red team campaigns across on-premise, Azure, Google Cloud, AWS, and hybrid environments.
- Execute objective-driven attack lifecycles from initial access through data exfiltration while maintain stealth and operational security.
- Build, operate, and customize command-and-control infrastructure, includ bespoke capabilities beyond standard tools such as Cobalt Strike and Sliver.
- Develop custom tools, implants, and loaders in C++, C#, Go, or Rust to bypass EDR and application allow-list controls.
- Run purple team exercises with SOC and defensive teams to improve detection rules, playbooks, and defensive capabilities.
- Write narrative reports with actionable recommendations for business and executive stakeholders.
Requirements
- 5+ years of hands-on experience in a dedicated red team role.
- Strong development skills in at least one low-level language such as C++, C#, Go, or Rust, plus script experience with Python or PowerShell.
- Deep experience attack complex enterprise environments, includ Active Directory and major cloud providers.
- Strong operational security mindset and experience conduct covert, objective-driven operations.
- Fluent English is required, both verbally and in writ.
- Enhanced Reliability Screen is required because this is an Integrity Sensitive Position.
Nice to have
- Advanced offensive security certifications such as OSEP, OSCE, GXPN, or CRTO.
Culture & Benefits
- 25–28 vacation days depend on contract, a pension scheme, 13th-month salary, and 8% holiday payment.
- Hybrid work in an informal environment with a multicultural cybersecurity team.
- Budget for professional development, advanced train, and certifications.
- Dedicated time, includ approximately 20%, for independent research and tool development.
- Opportunities for personal growth, mentor, knowledge shar, and challeng cybersecurity work.
hirify.global-process">Hir process
- Submit a CV and motivation letter.
- Complete Enhanced Reliability Screen as part of the application process.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →