Offensive Security Engineer (Red Team Focus) - Senior

Omega CRM, A Merkle Company; Vigo; Presencial; EUR 50.000 - 70.000; Jornada completa

Descripción de la vacante

Una empresa de ciberseguridad busca un Senior Red Team Operator para colaborar con una de las principales empresas farmacéuticas. El candidato ideal debe tener más de 4 años de experiencia en operaciones de Red Team y habilidades técnicas en herramientas como MITRE ATT&CK y Cobalt Strike. Se ofrece un contrato permanente, horarios flexibles, y oportunidades de formación. Este puesto desafiante está diseñado para aquellos apasionados por emular a actores de amenazas reales y mejorar las defensas cibernéticas.

Servicios

Seguro de salud

Horario flexible

Capacitación y certificaciones

Formación

• 4+ años de experiencia en operaciones de Red Team con un historial en entornos complejos y regulados.
• Dominio conciso de técnicas de evasión de detección.
• Experiencia práctica en sistemas de nube.

Responsabilidades

• Simulación de adversarios para planear y ejecutar operaciones de Red Team.
• Diseño de escenarios de ataque que desafíen a los defensores.
• Entregar informes técnicos claros y resumir hallazgos.

Conocimientos

MITRE ATT&CK

Cobalt Strike

Python

PowerShell

Go

Detección de EDR

Descripción del empleo

Omega CRM Consulting is looking for a Senior Red Team Operator that would like to collaborate with one of the top global pharmaceutical companies.

Dé el siguiente paso en su carrera profesional ahora : desplácese hacia abajo para leer la descripción completa del puesto y envíe su solicitud.

Join a top-tier Red Team in one of the world’s most regulated, security‑obsessed environments. As a Senior Red Team Operator, you’ll emulate advanced adversaries, outsmart blue teams, and push the boundaries of cyber defense. This is your chance to operate where creativity, technical mastery, and relentless curiosity are the norm.

Main tasks

Adversary Simulation : Plan and execute full‑spectrum Red Team operations—initial access, lateral movement, privilege escalation, and data exfiltration—mirroring real‑world threat actors.

Attack Development : Build and deploy custom tools, payloads, and resilient C2 infrastructure to pressure‑test modern defenses.

Critical Engagements : Target the organization’s most sensitive assets with advanced offensive techniques across on‑prem, cloud, and hybrid environments.

Scenario Design : Collaborate with internal Red and White Teams to craft attack scenarios that challenge defenders and expose meaningful gaps.

Reporting : Deliver crisp, actionable technical reports and executive summaries that tie findings to business risk and remediation priorities.

Remediation Partnership : Advise engineering / operations on closing gaps, validating fixes, and raising the security bar.

Continuous Innovation : Research emerging vectors, develop novel tradecraft, and mentor junior operators.

Stakeholder Engagement : Present results to technical and executive audiences; participate in governance and remediation sessions.

Security Initiatives : Support cybersecurity research and uplift projects when not executing Red Team ops.

Experience & Skills

4+ years in Red Team operations with a track record of high‑impact engagements in complex, regulated environments.

Technical Mastery : Hands‑on with offensive security frameworks (MITRE ATT&CK, Cobalt Strike, Sliver, Mythic), custom tooling / malware, in‑memory execution, and modern post‑exploitation techniques.

Programming & Creativity : Skilled in scripting (Python, PowerShell, Go) and engineering unconventional attack paths.

Stealth & Detection Evasion : Expert at flying under the radar—evading EDR, network sensors, and endpoint controls to minimize detection and keep operations covert.

Cloud & Identity Offense : Practical experience targeting cloud control planes and identity systems for persistence and escalation.

Communication : Fluent English; able to brief everyone from SOC analysts to C‑suite.

Autonomy & Initiative : Operate independently with disciplined OPSEC and strong problem‑solving instincts.

Passion for Offense : Passionate about emulating real‑world threat actors by continuously researching and developing novel attack paths, identifying unconventional entry points, and devising creative techniques to breach and challenge the toughest security controls.

What do We offer

Permanent contract.

Flexible Schedule. We make it easy. Balance your professional and personal life.

Trainings & Certifications. Improve your skills and get the official certificate from our main partners.

Home Office.

Flexible retribution (public transport ticket, Ticket restaurant, …).

Health insurance.

OMEGA in action. Our commitment to a better society is not just an intention.

About us

Omega CRM, a Merkle Company, is a global digital company specialising in accelerating the Business Experience (BX) of our clients through customer‑centric solutions, technology, and data – all enhanced by AI.

Together with Merkle, we form the largest Customer Experience Management (CXM) agency in Spain, and as part of the dentsu group, we offer end-to-end solutions that integrate media, creativity, content, technology, and strategy to deliver real business impact.

With over 23 years of experience, a team of 580+ professionals from 24 nationalities, and 2,500+ certifications, Omega CRM is a recognised leader in the Salesforce ecosystem in Spain.

We operate across key industries including Retail, Healthcare, Pharma, Real Estate, Education, and Non‑Profit, delivering omnichannel experiences in Customer Service, eCommerce, Marketing, and Analytics.

Client satisfaction is at our core (rating : 4.9 / 5), and we’ve been recognised with awards such as Salesforce Partner of the Year FY23 and Most Innovative Project (Iberia).

At Omega CRM, we believe in growth through people – guided by our values : #Talent, #Flexibility, #Commitment, and #Innovation. We grow #Together.