Cyber Security Expert - Red Teamer

Daimler AG; Mississauga; On-site; CAD 104,000 - 142,000; Full time

Job summary

Mercedes-Benz Canada is seeking a Cyber Security Expert Red Teamer to plan and execute adversary emulation across IT/OT and Cloud environments. You will work with detection and response teams to improve coverage and capabilities, delivering actionable results to both technical and executive audiences.

The ideal candidate has 3–6+ years in red/purple teams, with strong Windows AD exploitation, cloud experience, and proficiency in Python, PowerShell, and scripting.

Qualifications

• Post-secondary degree related to Cybersecurity or equivalent experience.
• 3–6+ years of red/purple team experience with security operations, threat hunting, incident response, or detection engineering.
• Certifications such as OSCP, OSEP, OSCE/OSED, CRTO/CRTL, GPEN, GXPN, GCFA, or GCIH preferred.
• Deep Windows Active Directory exploitation and lateral movement knowledge.
• Fluency across Windows, macOS, and Linux/Unix internals.
• Cloud experience (AWS, Azure, and/or GCP) including IaaS/PaaS and container attack surfaces.
• Familiarity with OT environments and Purdue model segmentation.
• Programming/scripting: Python, Bash, PowerShell, C, etc.
• Experience leveraging agents and LLMs to develop tooling or execute attacks.
• Strong written and verbal communication; bold, innovative, team player.

Responsibilities

• Lead or support Red Team engagements across a full kill-chain with actionable results for technical and executive audiences.
• Collaborate with detection engineering and incident response teams to test and iterate detection.
• Deliver technical debriefs / so-what walkthroughs to detection and incident response teams.
• Leverage BAS framework to replay and validate results.
• Develop tooling and agents, including LLMs, to accelerate engagements.
• Research, develop or modify tooling, exploits, and payloads to subvert detections; build team infra and automation.
• Attend conferences and trainings; onboard new members; evaluate new security solutions.

Education

Post-secondary degree related to Cybersecurity or equivalent experience

Job description

Aufgaben

Cyber Security Expert Red Teamer:

Mercedes-Benz Canada needs stars like you!
Mercedes-Benz is the world’s first automotive brand, and remains at the cutting-edge of sustainability, design, digitalization, connectivity, technology, fashion, and popular culture.

The iconic three-pointed star is always looking for the best and brightest. We are seeking individuals who want to be in the driver’s seat of transformation, working alongside talented colleagues who represent the Mercedes-Benz values.

Do you want to be part of writing the next chapter of the Mercedes-Benz story?

How your role will add to the story:
As a Red Team Operator, you will plan and execute realistic adversary emulation and full kill-chain operations against our own systems and networks in IT/OT and Cloud environments and work shoulder-to-shoulder with detection and response teams to directly improve detection coverage and capabilities.

A day in the life
Job Responsibility 1 Time allocation: 60%

• Lead or support Red Team engagements that can execute over a full kill-chain (initial access, lateral movement, privilege escalation, persistence, and impact) and deliver actionable results for both technical and executive audiences
• Partner and collaborate extensively with detection engineering and incident response teams to test and iterate whether specific TTPs are detected or not
• Deliver technical debriefs / “so-what” walkthroughs to detection and incident response teams, explaining not just what was exploited but why it matters
• Leverage our BAS framework to replay and validate results
• Employ and develop agents and LLMs to accelerate tool development and attack capabilities within engagements
  

Job Responsibility 2 Time allocation: 30%

• Research, develop, or modify tooling, exploits, and payloads to consistently subvert detections in our environment
  Build and maintain team infrastructure, internal tooling, and automation for pre- and post-exploitation workflows
• Conduct original research into evasion techniques, EDR internals, and emerging exploitation methods; contribute findings back into the team's tradecraft
  

Job Responsibility 3 Time allocation: 10%

• Attend and represent the team at conferences and trainings
• Support onboarding of new members
• Support evaluation of new security solutions

Vacancy Status: This posting reflects an approved, current vacancy within Mercedes-Benz Canada.

Posting Range: $103,636 - $142,499

Mercedes-Benz Canada is committed to fostering an inclusive, equitable, and accessible environment where all employees and customers feel valued, respected, and supported. While we thank every applicant for their interest in joining our iconic brand, we will only contact applicants selected for an interview.

If you require accommodation because of a disability, please reach out to [e-mail] and we will work with you to meet your needs throughout the recruitment, assessment, and selection process as applicable.

Testimonials from several Mercedes-Benz Canada stars, from an intern to an executive:

“Mercedes-Benz is more than a car brand; it’s a futuristic, technological brand continuing to research and evolve its strategy as a digital and luxurious company, all while championing sustainable initiatives.”

“This company grants its members the opportunity to professionally grow and discover the extent of the brand and its presence in all countries. You are granted the opportunity to drive innovation in several sectors, as this company allows you to take your career wherever you like with our very robust framework of opportunities, whether it’s rotations, international assignments, education programs and more.”

“As an intern, I feel a great sense of responsibility and accountability at Mercedes-Benz. The high level of responsibility and contribution found in our internship programs is unlike my experience anywhere else.”

“Most people, if not everyone, seek a great balance of life at work and outside of it. At Mercedes-Benz, not only does your work life grant you exciting opportunities, but you are also afforded great understanding of your time outside of work - including the right to disconnect.”

“Working for Mercedes-Benz, it’s certainly the brand and the pillars - but at the end of the day, once you’re in, it’s about the people, the experience, diverse cultures and backgrounds, everyone’s experience driving in one direction.”

Qualifikationen

Mercedes-Benz Star skills, requirements & traits:

• Completed a post-secondary degree related to Cybersecurity or equivalent experience
• 3-6+ years of experience in red/purple teams with exposure to security operations, threat hunting, incident response, or detection engineering
• Preferred Certifications, one or more of the following
  • OSCP, OSEP, OSCE/OSED (OffSec)
  • CRTO / CRTL (Zero-Point Security)
  • GPEN, GXPN, GCFA, GCIH (SANS/GIAC)
• Deep Windows Active Directory exploitation and lateral movement knowledge
• Working fluency across Windows, macOS, and Linux/Unix internals
• Cloud platform experience (AWS, Azure, and/or GCP), including IaaS/PaaS and container attack surfaces
• Familiarity with OT environments with regards to ICs/SCADA protocols, Purdue model segmentation, engineering workstations, safety instrumented systems, etc
• Programming/scripting proficiency: Python, Bash, PowerShell, C, etc
• Experience at leveraging agents and LLMs to develop new tooling or execute attacks during engagements
• Strong written and verbal communication
• Bold, innovative and enjoy challenging yourself
• Honest and professional, a strong team player
• Big picture thinker, go-getter, self-starter

Being a Mercedes-Benz star has its benefits:

• Commitment to inclusion & diversity
• Engaging corporate culture
• Ever-evolving brand strategy granting opportunities to build business acumen
• Training development and career growth opportunities
• Benefits to support work-life balance/integration
• A strong portfolio of corporate social responsibility initiatives
• State-of-the-art working facilities
• Vehicle purchase and experience programs
• Comprehensive health, dental, and pension programs
• Recognition rewards and discount programs