Red Team Operators - Multiple RolesNew

Conducts adversary-emulation engagements for NATO’s Cyber Security Centre, testing enterprise network, application and cloud defences. The role performs offensive security research and reporting, develops custom attack tooling and communicates actionable findings to technical and executive audiences.

• Plan, design and execute red-team engagements across network, application and cloud domains
• Conduct reconnaissance, OSINT, vulnerability scanning, exploitation and command-and-control operations
• Develop custom tools, scripts and malware to emulate sophisticated cyber threats
• Run social-engineering and phishing campaigns to test human and process defences
• Produce actionable reports for technical teams and executive stakeholders

• Master’s degree and five years of related experience, or bachelor’s degree and eight years of related experience for the G-20 role
• Bachelor’s degree and three years of related experience for the G-17 role
• At least ten years of progressive relevant expertise may compensate for the lack of a university degree
• Cybersecurity certification such as GRTP, GPEN, GWAPT, OSCP, OSCE, OSEE, GXPN, Red Team Operator certification or GREM
• Fluency in written and spoken English

• Red Teaming
• Adversary Emulation
• Penetration Testing
• Vulnerability Assessment
• Network Security
• Application Security
• Threat Intelligence
• Malware Development
• Social Engineering
• Technical Reporting
• Security Architecture
• Scripting

• MITRE ATT&CK
• Perl
• Python
• Ruby
• Bash
• Unix
• Windows

• Five-year contract
• Tax-free salary and household, child, expatriation and education allowances may apply