Senior Red Team Operator

Crimson7; Brussel Hoofdstad; Hybrid; EUR 90,000 - 140,000; Full time

Benefits offered by this job

Competitive compensation

Flexible working arrangements

Conference attendance and training

Job summary

Crimson7 seeks a Senior Red Team Operator to grow its offensive security practice. You will lead adversary simulations from start to finish, build custom tooling and tradecraft, and help clients understand their exposure to real-world threats.

Responsibilities include planning and executing engagements, mentoring operators, and collaborating with blue/purple teams to improve detection and response. Cash compensation is competitive and flexible working arrangements are offered.

Qualifications

• 6+ years in offensive security, with at least 3 years in red teaming.

Responsibilities

• Plan, lead and execute red team engagements end to end, from scoping and threat modelling to reporting.

Skills

Red Teaming

Offensive Security

TLPT (TIBER) engagements

Windows & Active Directory

Entra ID & Hybrid Identity

C2 Frameworks

EDR Evasion

MITRE ATT&CK

Threat Modelling

Tools

Custom offensive tooling

Job description

We're looking for a Senior Red Team Operator to grow our offensive security practice. You'll lead adversary simulations from start to finish, build custom tooling and tradecraft, and help clients understand how exposed they are to real-world threats. Our work includes regulated threat-led tests for financial entities, so hands-on TLPT experience is a big part of what we're looking for.

Responsibilities

• Plan, lead and execute red team engagements end to end, from scoping and threat modelling to reporting
• Run stealthy, long-term operations against mature, well-defended environments
• Build and maintain custom offensive tooling, implants and tradecraft
• Research new attack techniques and bring them into our engagements
• Contribute to TLPT/TIBER engagements alongside control teams and threat intelligence providers
• Write clear, actionable reports and present findings to technical and executive audiences
• Work with purple team colleagues and client blue teams to turn findings into better detection
• Mentor operators and help shape our offensive methodology

Requirements

• 6+ years in offensive security, at least 3 of them in red teaming
• Hands-on experience with at least one TLPT engagement (TIBER-EU or a national TIBER implementation, DORA TLPT, CBEST or similar)
• Strong command of Windows and Active Directory environments, including Entra ID and hybrid identity
• Deep experience with C2 frameworks, custom implant development and EDR evasion
• Solid knowledge of MITRE ATT&CK and common adversary TTPs
• Able to manage engagement timelines, risk and operational security on your own

Nice to Have

• Experience leading a TLPT engagement or acting as test manager
• Experience in financial-sector environments
• Published security research or conference talks
• Offensive cloud experience (Azure, AWS)
• Malware development and advanced evasion techniques
• Certifications such as CRTO, CRTL, OSEP, OSCE³, or CREST CCRTS/CCSAM

What We Offer

• Work with a team of top-tier offensive security researchers
• Access to cutting-edge research and tooling
• Competitive salary and benefits
• Flexible working arrangements
• Conference attendance and training budget