Senior Red Team Operator: Intelligence-Led Campaigns (Hybrid)

ING Hubs Spain; Madrid; Híbrido; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Pension plan

Flexible remuneration

Life insurance

Descripción de la vacante

ING Hubs Spain is seeking a Senior Red Team Operator to strengthen the bank's security posture through intelligence-led campaigns and adversarial testing. You will design long-running engagements across on-premise, cloud, and hybrid environments, executing the full attack lifecycle with stealth and operational security.

Join a diverse Spain-based red team within the Tribe Cyber Threat Management (CTM) of the Global CISO Office, collaborating with SOC and defensive teams to improve detections,

Formación

• 5+ years in a dedicated red team role.
• Development skills in C++, C#, Go or Rust for custom tools.
• Strong Python/PowerShell scripting capabilities.
• Deep experience attacking AD and major cloud providers (Azure, AWS, GCP).
• OPSEC mindset and covert operation experience.
• Advanced offensive security certifications are a plus.
• Fluent in English, written and spoken.

Responsabilidades

• Lead advanced red team engagements.
• Design and execute long-run, intelligence-led red team campaigns across on-prem, cloud, and hybrid environments.
• Perform full attack lifecycle from initial access to data exfiltration with stealth.
• Develop and maintain red team infrastructure and bespoke tooling.
• Collaborate with SOC for purple team exercises to tune detections and playbooks.
• Research emerging TTPs and create custom implants/loaders in C/C++/Go.
• Deliver actionable insights and executive-ready reports.

Conocimientos

Red team experience

Low-level programming

Scripting (Python/PowerShell)

AD & cloud attack experience

OPSEC mindset

Offensive security certs

English fluent

Herramientas

Cobalt Strike

Sliver

Descripción del empleo

ING Hubs Spain is seeking a Senior Red Team Operator to strengthen the bank's security posture through intelligence-led campaigns and adversarial testing. You will design long-running engagements across on-premise, cloud, and hybrid environments, executing the full attack lifecycle with stealth and operational security.

Join a diverse Spain-based red team within the Tribe Cyber Threat Management (CTM) of the Global CISO Office, collaborating with SOC and defensive teams to improve detections,