Cyber Senior Red Team Operator

Mindmatch; Alcobendas; Presencial; EUR 90.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Pension plan

Flexible remuneration

Transport allowance

Restaurant card

Descripción de la vacante

MindMatch busca un Senior Red Team Operator para unirse a ING desde Alcobendas, dentro de la oficina de CTM de la entidad financiera. El candidato diseñará y ejecutará campañas rojas avanzadas, simularáTTPs de adversarios y trabajará estrechamente con las defensas para fortalecer la postura de seguridad a escala global.

Se requiere más de 5 años en red team, experiencia en AD y entornos cloud, dominio de C/C++, Go, Rust o similares y habilidades de desarrollo y OPSEC.

Formación

• 5+ años de experiencia práctica en red team.
• Desarrollo en lenguajes de bajo nivel (C++, C#, Go, Rust) para herramientas.
• Experiencia en ataques a entornos empresariales complejos, AD y grandes proveedores cloud (Azure, AWS, GCP).
• Mentalidad OPSEC con operaciones encubiertas y orientadas a objetivos.
• Certificaciones avanzadas en seguridad ofensiva como OSEP/OSCE/OSEE/CCSAS GXPN CRTO deseables.
• Fluidez en inglés (oral y escrita).

Responsabilidades

• Liderar intervenciones avanzadas de red team.
• Diseñar y ejecutar campañas rojas complejas y de largo plazo.
• Ejecutar el ciclo de ataque completo desde acceso inicial hasta exfiltración.
• Desarrollar e mantener infraestructuras de red team.
• Desarrollar herramientas y C2 personalizadas para bypass de defensas.
• Colaborar con SOC en ejercicios Purple para mejorar detecciones.
• Investigar TTPs emergentes y crear herramientas e implants.
• Elaborar informes claros para la alta dirección.

Conocimientos

Red team operations

Low-level languages

Scripting languages

AD & Cloud attacks

OPSEC mindset

Advanced security certs

English fluency

Herramientas

Cobalt Strike

Sliver

Descripción del empleo

Cyber Senior Red Team Operator MindMatch Alcobendas, comunidad de madrid, Spain

Descripción del trabajo

Senior Red Team Operator

¿Interesado en saber más sobre este trabajo? Desplácese hacia abajo y descubra qué habilidades, experiencia y cualificaciones académicas se necesitan.

A role in the Global CISO Office that’s as much about breaking things as it is about building resilience.

Are you passionate about cybersecurity and driven by an adversarial mindset? Do you want to test a global financial institution against sophisticated, real-world threats?

As a Senior Red Team Operator at ING, you will be part of a hands‑on team focused on strengthening the banks security posture. We think like a criminal to test our people, processes, and technology on a global scale. Your mission will be to simulate the tactics, techniques, and procedures (TTPs) of advanced threat actors, providing critical assurance to the business and its leadership.

This is not a standard penetration testing role. We are looking for a specialist in red teaming who can plan and execute long‑term, intelligence‑led campaigns while maintaining exceptional operational security (OPSEC).

The team

You will join the Spain-based red team, a highly specialized, multicultural group of experts with a proven track record in cybersecurity. As part of the Tribe Cyber Threat Management (CTM), we have a hands‑on approach and focus on the constant evolution of our skills through research and on‑the‑job experience. We are a crucial part of the CISO office, and our work directly influences INGs global security strategy. We help each other to be successful and live by the Orange Behaviours.

Roles and responsibilities

• Lead advanced red team engagements.
• Design and conduct complex, long-run red team campaigns that mirror the sophistication of top-tier, intelligence-led exercises. You will test our global enterprise, including on-premise, cloud (Azure, Google Cloud), and hybrid environments.
• Execute the full attack lifecycle.
• Run objective-driven, end-to-end red team campaigns, from initial access to data exfiltration, while employing stealth to evade our Blue Team.
• Develop and maintain red team infrastructure.
• Build, operate, and customize the teams command-and-control (C2) infrastructure. You will be expected to go beyond using standard tools like Cobalt Strike or Sliver, developing bespoke capabilities to ensure operational success.
• Drive defensive improvements through purple teaming.
• Partner directly with our SOC and defensive teams in collaborative purple team exercises to tune detection rules, improve playbooks, and enhance ING’s defensive capabilities.
• Develop custom tooling to bypass advanced defences.
• Research emerging TTPs and create your own tools, implants, and loaders in languages like C++, C#, or Go to bypass modern security controls like EDR and application allow-listing.
• Deliver actionable insights to the business.
• Author comprehensive, narrative-style reports that translate complex technical findings into clear, actionable recommendations for executive stakeholders.

How to succeed

We're looking for someone who not only has the technical skills but also embodies the Orange Behaviours.

• You take it on and make it happen.
• You have a proactive, hands‑on mentality and take ownership of complex campaigns from planning to execution. You are relentlessly curious and driven to find new ways to challenge our defences.
• You help others to be successful.
• You are a natural collaborator, eager to share your expertise in purple team exercises and mentor junior operators. You thrive in a team environment where knowledge sharing is key to everyones growth.
• You are always a step ahead.
• You have a forward‑thinking mindset, constantly researching emerging threats and developing novel tools to stay ahead of the curve. You dont wait for instructions; you anticipate future challenges and build the solutions for them.

What are we looking for?

• 5+ years of hands‑on experience in a dedicated red team role.
• Strong development skills in at least one low‑level language (e.g., C++, C#, Go, Rust) for custom tool development, and proficiency in a scripting language (e.g., Python, PowerShell).
• Deep experience attacking complex enterprise environments, including Active Directory and major cloud providers (Azure, AWS, GCP).
• A strong Operational Security (OPSEC) mindset with a proven ability to conduct covert, objective‑driven operations.
• Advanced offensive security certifications, such as OSEP, OSCE/OSEE, CREST CCSAS, GXPN, or CRTO, are a significant plus.
• You are fluent in English, both verbally and in writing.

What do we offer?

The time you spend at work, the challenges you face or the lessons you get are very important, but… What about your personal life? At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest details.

Check out what is waiting for you!

Be flexible my friend.

Our model is all about flexibility and accountability. Keeping both our customers and our colleagues needs in mind, you determine together which days you work at home and which you come to ING MAD to offer your best self. Do your thing.

Restaurant card.

So that thinking about what to have for lunch doesn’t take up your time or your cravings.

Our house will be your home.

In our offices you can find electric mobility solutions, doctor, hairdresser, gym, The Good Service (to help you with your errands) and much more!

Health insurance.

For you and all your family (spouse/partner and children).

Life insurance.

We help you protect what matters most to you.

Flexible remuneration.

In addition, you will enjoy our flexible remuneration model, through a more tax‑advantaged way, you will be able to access other services such as nursery, transport card, training aids…

Transport allowance.

It doesnt matter where you live, we’ll help you get to the office.

Pension plan.

You can benefit from our pension plan after 1 month with us!

Discover ING Hubs Spain

We’re building something exciting—and we want you to be part of it.

ING is launching the new member of ING Hubs in Spain, an integral part of ING in charge of designing and delivering important technological and operational solutions to make banking frictionless for our customers. ING Hubs play a key role in our ‘Growing the difference’ strategy to become the best European bank. This will be our sixth global hub, joining a network of over 13,000 professionals in the Philippines, Poland, Romania, Slovakia, Türkiye and Spain.

What makes us different?

We have a tech‑first mindset: We’re not just a bank—we’re a tech company that happens to do banking. Our new hub will be a center of excellence for scalable, fast, and secure technology.

We have global impact: You’ll be working on solutions that serve more than 34 million of customers in over 38 countries.

We are agile: ING was the first bank to adopt agile at scale. We continue to evolve with a collaborative, cross‑functional way of working.

Sustainability at the heart of what we do: We have a role to play in defining new ways of doing business that align economic growth with positive environmental and social impact.

At ING, we believe in diversity, inclusion, and belonging. We’re proud of our international teams and are committed to creating an environment where everyone can thrive. We value authenticity, collaboration, and continuous learning. xkdbapo

We’re looking for curious minds, bold builders, and passionate problem‑solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose—we’re looking forward to meeting you.

Crear una alerta de empleo para esta búsqueda

Cyber Senior Red Team Operator Alcobendas, comunidad de madrid, Spain