Senior Red Team Operator | Adversary-Led Cyber Campaigns

ING Hubs Spain; Comunidad de Madrid; Híbrido; EUR 90.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Restaurant card

Health insurance

Life insurance

Pension plan

Transport allowance

Flexible remuneration

Descripción de la vacante

ING Hubs Spain is seeking a Senior Red Team Operator to join the Spain-based red team within the Tribe Cyber Threat Management (CTM) to test and strengthen ING's security posture. You will simulate TTPs of advanced threat actors, plan long-term campaigns, and operate across on-prem, cloud (Azure, Google Cloud), and hybrid environments.

You will lead engagements, develop bespoke tooling, and work with SOC to tune detections. Fluency in English and an OPSEC mindset are essential for success.

Formación

• 5+ years of hands-on red team experience.
• Strong development skills in C++, C#, Go, or Python.
• Deep experience attacking complex enterprise environments, including AD and cloud providers.
• OPSEC mindset with ability to conduct covert, objective-driven operations.
• Advanced offensive security certifications (OSEP, OSCE/OSEE, CREST CCSAS, GXPN, or CRTO) are a plus.
• Fluent English, written and spoken.

Responsabilidades

• Lead advanced red team engagements.
• Design and conduct long-run red team campaigns across on-prem, cloud, and hybrid environments.
• Execute the full attack lifecycle from initial access to data exfiltration.
• Develop and maintain red team infrastructure and C2 tooling.
• Collaborate with SOC in purple team exercises to improve detections and playbooks.
• Deliver actionable insights to the business and executives.

Conocimientos

C++

C#

Go

Python

OPSEC mindset

English fluency

Educación

Offensive security certifications (OSEP/OSCE/OSEE/CCSAS/GXPN/CRTO)

Herramientas

Cobalt Strike

Sliver

Descripción del empleo

ING Hubs Spain is seeking a Senior Red Team Operator to join the Spain-based red team within the Tribe Cyber Threat Management (CTM) to test and strengthen ING's security posture. You will simulate TTPs of advanced threat actors, plan long-term campaigns, and operate across on-prem, cloud (Azure, Google Cloud), and hybrid environments.

You will lead engagements, develop bespoke tooling, and work with SOC to tune detections. Fluency in English and an OPSEC mindset are essential for success.