Experienced Red Team Operator

Vivid Resourcing Ltd; Brussel; Sur place; EUR 90 000 - 150 000; Plein temps

Avantages offerts par ce poste

Hybrid work model

Training opportunities

Résumé du poste

Vivid Resourcing partners with a specialised cybersecurity company to recruit for their Red Team. You will design and execute adversary simulations, spanning critical business processes and systems, in a collaborative, multi-disciplinary environment.

You will operate across the full attack chain, build tooling, and deliver advanced exercises. Strong English communication is essential to translate findings to executives and technical teams.

Qualifications

• Minimum several years of hands-on penetration testing or red team experience.
• Strong knowledge of Windows Active Directory and Entra ID or other cloud environments.
• Clear written and spoken English; ability to explain decisions to technical and non-technical audiences.

Responsabilités

• Design and execute realistic attack scenarios against critical business processes and systems.
• Operate across the full attack chain: reconnaissance and initial access, command and control, privilege escalation, lateral movement and actions on objectives.
• Deliver threat-intelligence-led ART and TIBER exercises, alongside other advanced red team and purple team engagements.
• Build or adapt tooling, infrastructure and payloads when an operation requires it.
• Make sound OPSEC and risk decisions while working in live client environments.
• Translate technical activity into clear lessons for defenders, technical leaders and executives.

Connaissances

Penetration testing

Red team operations

Windows Active Directory

Entra ID / cloud environments

C2 / OPSEC skills

English communication

Description du poste

I'm partnered with a specialised cybersecurity company who transform how organisations approach digital safety. And are located in the Netherlands, Germany, Sweden, and Belgium.

They combine ethical hacking expertise with behavioral psychology insights and cutting-edge security management at the highest level. They respond to threats and anticipate them, providing 24/7 managed security services and tailored solutions for each client's journey.

The team you will join:

Our Red Team brings together 15 ethical hackers with expertise spanning adversary simulation, social engineering, Active Directory and Entra ID, malware and tooling development, cloud, application security, reverse engineering and exploitation. You will also work closely with our Threat Intelligence, Blue Team, Reverse Engineering and CERT specialists.

What you will do:

• Design and execute realistic attack scenarios against critical business processes and systems.
• Operate across the full attack chain: reconnaissance and initial access, command and control, privilege escalation, lateral movement and actions on objectives.
• Deliver threat-intelligence-led ART and TIBER exercises, alongside other advanced red team and purple team engagements.
• Build or adapt tooling, infrastructure and payloads when an operation requires it.
• Make sound OPSEC and risk decisions while working in live client environments.
• Translate technical activity into clear lessons for defenders, technical leaders and executives.

What you can expect from them:

• Complex, multi-week adversary simulation assignments with meaningful objectives.
• A team of specialists who share knowledge and bring different perspectives to an operation.
• Direct collaboration with offensive, defensive, threat intelligence, reverse engineering and incident-response experts.
• Time and budget for training, certifications, conferences and longer development programmes.
• Hybrid working with access to our offices in Belgium, Germany, the Netherlands and Sweden.
• Pension, mobility and allowances differ by country.
• Several years of hands-on penetration testing or red team experience, including responsibility for planning and executing operations.
• Strong attack-path knowledge in Windows and Active Directory environments.
• Experience with Entra ID or other cloud environments.
• Practical command-and-control, OPSEC and infrastructure skills.
• The judgement to balance operational objectives, client safety and learning value.
• Clear written and spoken English, with the ability to explain decisions and findings to both technical and non-technical audiences.