Senior Red Team Operator: Remote-Eligible Security

Ing Hubs Spain; Alcobendas; Híbrido; EUR 90.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Life insurance

Flexible remuneration

Pension plan

Descripción de la vacante

ING Hubs Spain is seeking a Senior Red Team Operator to lead advanced red team engagements and design intelligence-led campaigns across global bank environments, including on-prem, cloud, and hybrid setups.

You will simulate attacker TTPs, develop bespoke tooling, and deliver actionable insights for executive leadership while collaborating with SOC for improved detections and security controls.

Formación

• 5+ years of hands-on red team experience.
• Strong development skills in C++, C#, Go or Rust for tool development plus Python or PowerShell scripting.
• Deep experience in attacking complex enterprise environments including AD and major cloud providers (Azure, AWS, GCP).
• Strong OPSEC mindset for covert, objective-driven operations.
• Advanced offensive security certifications such as OSEP, OSCE/OSEE, CREST CCSAS, GXPN, or CRTO are a plus.
• You are fluent in English, both written and spoken.

Responsabilidades

• Lead advanced red team engagements across on-prem, cloud and hybrid environments.
• Design and run long-run, intelligence-led campaigns mirroring high-end adversaries.
• Execute full attack lifecycle from initial access to data exfiltration.
• Develop and maintain red team infrastructure and bespoke tooling.
• Collaborate with SOC and defensive teams in purple team exercises to improve detections.
• Research emerging TTPs and create tools/loaders in languages like C++, C#, or Go.

Conocimientos

Red team experience

Low-level language development

Scripting languages

OPSEC mindset

Advanced certifications

English fluency

Cloud / AD experience

Herramientas

Cobalt Strike

Sliver

Descripción del empleo

ING Hubs Spain is seeking a Senior Red Team Operator to lead advanced red team engagements and design intelligence-led campaigns across global bank environments, including on-prem, cloud, and hybrid setups.

You will simulate attacker TTPs, develop bespoke tooling, and deliver actionable insights for executive leadership while collaborating with SOC for improved detections and security controls.