Senior Red Team Lead — Intelligence-Led Cyber Attacks (Hybrid)

ING Nederland; Amsterdam; Hybrid; EUR 120,000 - 180,000; Full time

Benefits offered by this job

25-28 vacation days

Pension scheme

13th month salary

8% Holiday payment

Hybrid working

Budget for professional development

Research time for tool development

Informal, innovative environment

Job summary

ING Nederland in Amsterdam is seeking a Senior Red Team Operator to strengthen the bank’s security posture by emulating attacker tactics at a global scale. You will plan intelligence-led campaigns, design bespoke tooling, and work closely with the CTM team to raise defense capabilities across on-prem, cloud, and hybrid environments.

You should have 5+ years in red teaming, strong low-level programming skills, and experience with AD and cloud providers.

Qualifications

• 5+ years hands-on red team experience.
• Proficiency in at least one low-level language (C++, C#, Go, Rust) for custom tool development.
• Experience targeting Active Directory and major cloud providers (Azure, AWS, GCP).
• Fluency in English, written and spoken.

Responsibilities

• Lead advanced red team engagements and design long-run campaigns mirroring real-world threats.
• Run end-to-end red team campaigns from initial access to data exfiltration with stealth.
• Develop and maintain red team infrastructure and bespoke tooling beyond standard frameworks.
• Collaborate with SOC during purple team exercises to tune detections and improve playbooks.
• Create tools and loaders in C++, C#, or Go to bypass modern security controls.
• Deliver clear, executive-ready reports with actionable security recommendations.

Skills

Red team experience

C++

C#

Go

Rust

Python

PowerShell

Azure

AWS

GCP

OPSEC mindset

English fluency

Tools

Cobalt Strike

Sliver

Job description

ING Nederland in Amsterdam is seeking a Senior Red Team Operator to strengthen the bank’s security posture by emulating attacker tactics at a global scale. You will plan intelligence-led campaigns, design bespoke tooling, and work closely with the CTM team to raise defense capabilities across on-prem, cloud, and hybrid environments.

You should have 5+ years in red teaming, strong low-level programming skills, and experience with AD and cloud providers.