Senior Security Specialist Red Team

Defion

Zoetermeer

Hybrid

EUR 90,000 - 130,000

Full time

12 days ago

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

DEFION is seeking a Senior Security Specialist to join and grow its Red Team, taking technical ownership from day one and advancing toward the tech lead role. The role is hybrid, requiring at least three days in the office in Zoetermeer.

You will join a team that performs realistic attacker simulations for clients and shapes the team’s growth and capabilities. You will lead engagements, design scenarios, work with AD/Entra ID and cloud targets, develop tooling, mentor colleagues, and partner

Qualifications

Several years of experience in offensive security with infrastructure, AD and cloud testing.
Demonstrable experience with red team engagements, adversary simulation or assume breach assignments.
In-depth knowledge of Active Directory, Entra ID and cloud environments (Azure and AWS).
Hands-on experience with at least one C2 framework (Cobalt Strike, Sliver, Mythic or Havoc).
Understanding of EDR/detection and how attackers evade them.
Ability to program or script (Python, C#, Go or PowerShell).
Technical degree or demonstrable equivalent level.
Strong communication skills for explaining attack stories to engineers and management.

Responsibilities

Carry out red team engagements and adversary simulations from recon to persistence and objectives.
Design attack scenarios based on threat actors and MITRE ATT&CK mappings.
Attack AD, Entra ID and cloud environments and bypass modern detection solutions.
Translate attack paths into clear reports for SOC and client management; facilitate purple team sessions.
Apply expertise to assume breach, AD and cloud assessments between operations.
Develop red team proposition, tooling, and reporting formats; contribute to OPSEC guidelines.

Skills

Offensive security

AD and cloud testing

C2 frameworks

Programming/Scripting

Technical leadership

Communication

Initiative/Build tooling

Threat actor knowledge

Education

Technical degree (university of applied sciences or university)

Tools

Cobalt Strike

Sliver

Mythic

Havoc

Job description

Hybrid, at least 3 days a week in the office

Employment

Full-time

Senior, with a path to tech lead

Team

Red Team

You have already run real red team operations and want to take the next step. At DEFION you join a red team that already carries out operations for clients. You help build it further and grow into the technical lead of the unit.

A red team that is already up and running, and that you will build out

Our Red Team already carries out red team engagements for clients: realistic attack simulations that show organisations how their prevention, detection and response hold up against a targeted attacker. The team stands on the shoulders of a large offensive security team with years of experience in complex infrastructure, cloud and Active Directory environments. You also work closely with colleagues in incident response and managed detection and response, who see every day how real attackers operate.

We want the Red Team to grow, in size and in capability. For that we are looking for a senior who already has red team experience and wants to set its technical direction.

What you will do

Red team operations

You carry out red team engagements and adversary simulations, from reconnaissance and initial access to lateral movement, persistence and achieving the objectives.
You design attack scenarios based on relevant threat actors and their TTPs, mapped to MITRE ATT&CK.
You attack Active Directory, Entra ID and hybrid cloud environments and find your way past modern detection solutions.
You translate attack paths into clear reports for both the SOC and the client’s management, and facilitate purple team sessions.
Between operations you apply your expertise to assume breach, AD and cloud assessments.

Building out the Red Team

Together with the team you develop the red team proposition: which services we offer, to which clients and how we deliver them.
You sharpen the methodology, scenarios, reporting format and OPSEC guidelines.
You help build tooling, C2 infrastructure and evasion capability.
You are the technical sparring partner for sales and clients when scoping red team engagements.

Technical leadership

You take technical ownership of operations and safeguard the quality of the work.
You help recruit new team members and mentor pentesters who want to move into red teaming.
You are a sparring partner for colleagues on complex assignments and technical decisions.

Growing into tech lead

You start as a Senior Security Specialist in the Red Team and take technical responsibility for engagements from day one. As the team grows, you grow into its technical lead, responsible for the technical direction, the quality of the work and the development of the people. In your development plan we agree together what that step looks like and what you need to get there.

What you bring

Must have:

Several years of experience in offensive security, with a solid grounding in infrastructure, AD and cloud testing
Demonstrable experience with red team engagements, adversary simulation or assume breach assignments
In-depth knowledge of Active Directory, Entra ID and cloud environments (Azure and AWS)
Hands-on experience with at least one C2 framework, such as Cobalt Strike, Sliver, Mythic or Havoc
An understanding of how EDR and other detection mechanisms work and how attackers evade them
You can programme or script, for example in Python, C#, Go or PowerShell
A technical degree at university of applied sciences or university level, or a demonstrably equivalent level
Strong communication skills: you can explain an attack story clearly to engineers and management alike
You like to take the initiative, enjoy building things and want to make others technically better

Nice to have: