Senior Red Team Operator & Offensive Security Expert

Nordea Group; Warszawa; Hybrid; PLN 110,000 - 190,000; Full time

Job summary

Nordea Group is seeking a Red Team Operator (Expert IT Security Specialist) to join the Offensive Testing team within Cyber Security. You will participate in Red Team exercises, oversee external vendors, and collaborate with Blue Team during Purple Team engagements to advance security capabilities across the bank.

You will have 3+ years of hands-on experience with Red/Purple Team activities, MITRE ATT&CK, and scripting, and you will communicate complex issues clearly to business stakeholders.

Qualifications

• 3+ years of professional experience in red/purple team exercises.
• Hands-on experience with command and control tools, fuzzing, breach attack simulation tools.
• Regulatory based red teaming experience (e.g. TIBER, CBEST, iCAST, FEER, AASE).
• Working knowledge of Windows and Linux, networks, scripting (Python, Bash, PowerShell, Perl).
• Strong English written and spoken communication.

Responsibilities

• Participate in Red Team exercises (TLPT and TIBER) including preparation, execution and reporting phases.
• Oversee external vendors for offensive security exercises.
• Collaborate with Blue Team and stakeholders during Purple Team engagements.
• Plan and report on offensive security projects such as Security Control Testing, War Gaming, Attack Path Mapping.
• Be a subject matter expert in Offensive Security.

Skills

Red Teaming

Purple Teaming

English communication

Analytical thinking

Independent work

Tools

Command & Control tools

Fuzzing

Exploit development

MITRE ATT&CK

Job description

Nordea Group is seeking a Red Team Operator (Expert IT Security Specialist) to join the Offensive Testing team within Cyber Security. You will participate in Red Team exercises, oversee external vendors, and collaborate with Blue Team during Purple Team engagements to advance security capabilities across the bank.

You will have 3+ years of hands-on experience with Red/Purple Team activities, MITRE ATT&CK, and scripting, and you will communicate complex issues clearly to business stakeholders.