Senior Security Engineer (Red Team)

Atos Poland Global Services Sp. z o.o.; Województwo kujawsko-pomorskie; Hybrid; PLN 670,000 - 894,000; Full time

Benefits offered by this job

Hybrid working model

Job summary

Atos Poland Global Services Sp. z o.o. poszukuje specjalisty ds.

cyberbezpieczeństwa do prowadzenia zaawansowanych operacji red team i testów penetracyjnych. Będziesz tworzyć niestandardowe narzędzia, przeprowadzać oceny podatności i prowadzić działania post-exploitation w zróżnicowanych środowiskach. Wymagane jest doświadczenie z atakami symulowanymi, znajomość BurpSuite/Nessus/Nmap oraz chmury AWS/Azure/GCP, a także AD/EntraID i umiejętności dokumentacyjne.

Qualifications

• Doświadczenie z zaawansowanymi operacjami red team i testami penetracyjnymi.
• Silne zaplecze administracyjne systemów i rozwoju oprogramowania.
• Głębokie zrozumienie podatności i technik eksploatacyjnych.
• Znajomość jednego języka programowania (np. Python, C/C++, Go).
• Znajomość narzędzi skanujących BurpSuite/Nessus/Nmap i chmur (AWS/Azure/GCP).
• Active Directory i EntraID oraz znajomość sieci i systemów Windows/Linux.
• Dobre umiejętności komunikacyjne i dokumentacyjne.

Responsibilities

• Planowanie i wykonanie zaawansowanych operacji red team, w tym emulacja przeciwników.
• Tworzenie i utrzymanie narzędzi do operacji ofensywnych.
• Przeprowadzanie oceny podatności, rozwijanie exploitów i działania po eksploatacji.
• Przeprowadzanie rekonesansu, initial access, ruch boczny i persistence z użyciem C2.
• Analiza i odwrotna inżynieria aplikacji, binarek i protokołów.
• Współpraca z blue teams w celu poprawy detekcji i reakcji.
• Publikowanie blogów technicznych, CVE i narzędzi open-source.
• Udział w CTF, bug bounty i dzielenie się wiedzą w zespole.

Skills

Penetration testing

Red teaming

System administration

Software development

Programming languages (Python, C/C++,

BurpSuite, Nmap, Nessus

Cloud environments (AWS, Azure, GCP)

Active Directory / EntraID

Networking fundamentals

Windows / Linux

Documentation

Tools

BurpSuite

Nmap

Nessus

C2 frameworks

Job description

Nasze wymagania:

• Penetration testing and red teaming experience.
• Solid background in system administration and software development.
• Deep understanding of vulnerabilities and exploitation techniques.
• Proficiency in at least one programming language (e.g., Python, C/C++, Go).
• BurpSuite, Nmap, Nessus, and other scanning tools
• Cloud environments (AWS, Azure, GCP)
• Active Directory and EntraID
• Familiarity with networking fundamentals and operating systems (Windows, Linux)
• Strong communication and documentation skills.

Mile widziane:

• Experience in incident response and threat hunting.
• Certifications such as OSCP, CRTO, CRTL, OSEP, OSWE, OSED, CPTS, CAPE, CWES, CISSP.
• Contributions to CVEs or security research.

O projekcie:

About EvidenEviden is the Atos Group brand for hardware and software products with c. € 1 billion in revenue, operating in 36 countries and comprising four business units: advanced computing, cybersecurity products, mission-critical systems and vision AI. As a next-generation technology leader, Eviden offers a unique combination of hardware and software technologies for businesses, public sector and defense organizations and research institutions, helping them to create value out of their data. Bringing together more than 4,500 world-class talents and holding more than 2,100 patents, Eviden provides a strong portfolio of innovative and eco-efficient solutions in AI, computing, security, data and applications.

Role Overview:

This is NOT another consultancy hamster wheel where you spend your week glued to Burp Suite and Word running the same tired web/API/fat client playbook on Monday and shipping the same predictable report on Friday.Here, you operate.You’ll emulate real world threat actors and run full scale attack campaigns across complex environments. No two projects are the same: one week you’re building and operating red team infrastructure, the next you’re tearing through external attack surface, pivoting deep inside networks, or pressure-testing detection and response in real time.At the same time, this isn’t just adversary simulation. You’ll also conduct penetration tests across a wide variety of targets, using them as a foundation, not the ceiling, for deeper, more creative offensive work.We’re looking for builders and operators, people who don’t only follow checklists, but think in chains, and have an offensive mindset. People who automate the boring parts so they can focus on the interesting ones.If you want comfort and routine, this isn’t it. If you want to operate like an actual attacker - welcome.

Zakres obowiązków:

• Plan and execute advanced red team operations, including adversary emulation and scenario-based testing.
• Develop and maintain custom tooling for offensive security operations.
• Perform vulnerability assessments, exploit development, and post-exploitation activities across diverse environments.
• Conduct reconnaissance, initial access, lateral movement, and persistence techniques using C2 frameworks.
• Analyze and reverse engineer applications, binaries, and protocols.
• Collaborate with blue teams to improve detection and response capabilities.
• Research and publish technical blog articles, CVEs, and open-source tools.
• Participate in CTFs, bug bounty programs, and contribute to the security community.
• Share knowledge across teams and mentor junior engineers.

Oferujemy:

• Work in a dynamic, international environment.
• Opportunities for professional growth and involvement in strategic projects.
• Competitive salary and benefits package.
• Hybrid working model.