Red Team Operator

Crimson7; Brussel Hoofdstad; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Crimson7 in Belgium is seeking an experienced Red Team Operator who can lead complex engagements from planning to reporting, build custom tooling, and translate findings into practical defenses.

You'll work with client teams, shape operations, and share knowledge to strengthen our offensive practice. The role requires hands-on red team leadership, deep Windows/AD knowledge, and familiarity with MITRE ATT&CK.

Qualifications

• 5+ years in offensive security with hands-on red team experience.
• Experience leading or independently delivering complex red team engagements.
• Strong knowledge of Windows and Active Directory environments, including hybrid identity.
• Experience with C2 frameworks, custom tooling, and endpoint security controls.
• Working knowledge of MITRE ATT&CK and common adversary TTPs.
• Able to manage engagement scope, timelines, risk, and operational security.
• Clear written and verbal communication with technical and executive audiences.

Responsibilities

• Lead red team engagements from scoping and threat modelling through safe execution, debrief, and reporting.
• Run discreet operations in mature environments while managing rules of engagement, risk, and operational security.
• Develop and maintain custom tooling, implants, and tradecraft for realistic adversary simulations.
• Research new techniques and assess where they can responsibly strengthen an engagement.
• Present clear findings to technical teams and executives, with practical recommendations.
• Work with purple team colleagues and client defenders to validate and improve detections.
• Share knowledge with colleagues and contribute to the development of our methodology.

Skills

Red team leadership

Threat modelling

Windows/AD knowledge

MITRE ATT&CK

Tools

C2 frameworks

Custom tooling

Endpoint security controls

Job description

We're looking for an experienced Red Team Operator who can take ownership of complex engagements and help raise the standard of our offensive practice. You'll shape operations from planning and threat modelling through execution and reporting, develop custom tooling and tradecraft, and work with client teams to turn findings into practical defensive improvements.

Responsibilities

• Lead red team engagements from scoping and threat modelling through safe execution, debrief, and reporting
• Run discreet operations in mature environments while managing rules of engagement, risk, and operational security
• Develop and maintain custom tooling, implants, and tradecraft for realistic adversary simulations
• Research new techniques and assess where they can responsibly strengthen an engagement
• Present clear findings to technical teams and executives, with practical recommendations
• Work with purple team colleagues and client defenders to validate and improve detections
• Share knowledge with colleagues and contribute to the development of our methodology

Requirements

• 5+ years in offensive security, including substantial hands-on red team experience
• Experience leading or independently delivering complex red team engagements
• Strong knowledge of Windows and Active Directory environments, including hybrid identity
• Practical experience with C2 frameworks, custom tooling, and endpoint security controls
• Working knowledge of MITRE ATT&CK and common adversary TTPs
• Able to manage engagement scope, timelines, risk, and operational security
• Clear written and verbal communication with technical and executive audiences

Nice to Have

• Experience with cloud environments such as Azure or AWS
• Experience contributing to purple team work or detection improvement
• Published security research or conference talks
• Certifications such as CRTO, CRTL, OSEP, OSCE³, or equivalent experience

What We Offer

• Work with a team of top-tier offensive security researchers
• Access to cutting-edge research and tooling
• Competitive salary and benefits
• Flexible working arrangements
• Conference attendance and training budget