Careers / Open position
Red Team Operator
Objective-based adversary simulation, detection evasion and purple-team work.
Europe · Senior
Minimum certification: CRTO
Role details
What you would do
- Plan and run objective-based adversary simulations against agreed targets
- Gain and extend access through Active Directory, Entra ID and cloud identity
- Adapt tradecraft to the client's detection stack and operate quietly
- Run purple-team sessions that turn findings into better detections
Minimum requirements
- An earned CRTO certification. Course attendance or a planned exam does not meet this requirement.
- Practical knowledge of Windows, Active Directory, Kerberos and identity-based attack paths.
- Hands-on use of C2 frameworks, operational security and safe execution within written rules of engagement.
- Ability to work with PowerShell, C# or Python and understand telemetry, EDR and defensive detection.
- Clear operational notes and reporting in English; ability to explain and demonstrate your own red-team work.
Additional strengths (optional)
- OSEP.
- Experience working with defenders in purple-team exercises and translating observations into detection improvements.
What to include in a technical application
Use the application link for the relevant role and email [email protected] with:
- The role you are applying for and a relevant CV.
- Your earned certifications, including the required one; add a public verification link where available.
- One or two examples of your own technical work: research, a write-up, an advisory, a tool or a laboratory demonstration.
- A short explanation of your contribution and the technical work you want to do.
Do not send client data or material covered by an NDA. A laboratory example is suitable when professional work is confidential.
Hiring process
How hiring works for this role
Eligibility review and introduction
We first review the required role-specific certification, relevant experience and work examples. Candidates who meet the minimum requirements are invited to an introductory conversation with a senior team member.
Technical session
Either a practical exercise or a walkthrough of work you have already done, such as a CVE, a write-up or a tool you built. We care about how you reason, not trick questions.
Meet the team
You meet the people you would work with day to day. We talk through real engagements, how the team operates and where you would fit.
Offer
If it is a match on both sides, we make you an offer and agree the details with you directly, including how and where you will work.
Apply for this role
Use the email button and include the application details above. Please do not share confidential client information.