You can apply for our vacancies online or send us an open application. We will ask you to tell us a bit more about yourself, such as your name and address, for example, and information about your educational background. You can upload your CV and a motivation letter. We will send you confirmation when we have received all your details.
Red Team Specialist
Red Team Specialist
Be the true you
Simulate real-world cyber threats, develop innovative tradecraft, and execute covert operations in complex IT environments. At Deloitte.
Benefits
- You will receive a profit-sharing bonus. On top of your fixed salary.
- Continue professional growth. Join our development program.
- A work-from-home office setup allowance to make sure you have everything you need for an ergonomically designed workstation and internet allowance.
- Work part-time (32 hours a week) or full-time (40-hours a week).
Be the true you
You are an offensive security enthusiast, finding creative ways to break into highly secured environments and laterally move to obtain access to the most critical assets. You do all this staying under the radar of Blue Teams and sysadmins. You are keen on researching new techniques and developing solutions to reach your goals. For the role of Red Team specialist, you also have:
- Mastered C2 frameworks like Mythic, Cobalt Strike, Brute Ratel, Nighthawk.
- A track record of obtaining initial footholds in mature enterprise environments.
- Experience evading Endpoint Detection and Response (EDR) solutions like Microsoft Defender for Endpoint, CrowdStrike, Elastic, SentinelOne, and Trellix.
- Advanced knowledge of common enterprise technologies such as Active Directory and Azure/Entra ID.
- Programming experience in languages such as C/C++, C#, PowerShell, Python and bash.
- A creative mindset to the entire cyber kill chain from obtaining initial access to achieving objectives that align with organization-specific business risks (not just “Domain Admin”!).
- Conducted Red Team operations in complex environments, e.g., TIBER-EU, ART, CBEST.
- A passion for R&D with experience crafting your own tools and a drive to stay up-to-date with attack techniques and vulnerabilities.
- Worked proficiently with offensive tooling like Impacket, Mimikatz, Kekeo, BloodHound, Rubeus, socat and Sysinternals suite.
- Good communication skills and fluency in English.
- While not mandatory, relevant certifications can be an advantage (e.g., OSEP, OSED, OSEE, CRTO, CRTL, CRTE, CCRTS/CCSAS).
- It’s a plus if you have presented at security conferences or written technical blogs and whitepapers.
What impact will you make?
We take a proactive approach to strengthening organisational resilience through ethical hacking. As a Red Team specialist, you will work in a highly skilled team to perform Red Team exercises for our international clients. Using your offensive skills and experience, you will covertly breach our clients’ networks and provide recommendations to strengthen the client’s security posture. To sharpen your skills, you will perform research on the latest techniques and tools, join and share insights at our Deloitte Global Red Team knowledge exchange sessions.
Let's make progress together
Connect your future to Deloitte
How do you do this?
- Finding creative ways to obtain a foothold in a client's network.
- Applying an adversary mindset to simulate sophisticated actors and achieve project-specific objectives.
- Covertly traversing the network, avoiding detection.
- Performing research, developing your own tools, and sharpening your tradecraft.
- Sharing your research within the Deloitte Global Red Team community and with the broader security community, for example writing blogs, speaking at conferences, or publishing code.
- Turning security weaknesses into tailored and concrete recommendations which you will present to clients.
- Follow-up to Red Team exercises with Purple Team workshops to help our clients’ defensive teams to identify tactics, techniques, and procedures (TTPs) used by real-world adversaries.
We would like to meet you!
We are curious to know more about you. To learn what makes you exceptional. Because at Deloitte, we believe that our mutual differences add value to our client's needs. Please introduce yourself and apply for this great opportunity.
Our application process
Select one of the steps for more information
Step 1: Preparation
Step 2: CV and motivation
You can upload your CV and a motivation letter. We will send you a confirmation when we have received all your details.
Step 3: The assessment
When a recruiter sees enough of a match with your profile, we will ask you to complete an online assessment. By playing four online games, we can see which qualities and talents you possess and whether they align with the position you've applied for.
Step 4: The interview
Depending on the scores of the career scan, you will be invited for a first interview with the recruiter. The first interview is held with a recruiter and someone from the team. We are curious about who you are, what you have done and what you expect from a new job. We also give you more insight into what we are looking for and what the tasks are that belong to the position. If both parties would like to discuss it further, you will be invited for a next interview. In these conversations, we go deeper into the content. What is your talent and what skills do you manage? You can during one of the next interviews get a case study.
Step 5: The offer
When all conversations have been satisfactorily completed (for both parties), an offer will follow. The recruiter will draw up the contract for you which you will receive digitally.
Questions or doubts? Get in touch.
Teun Heidemann
Recruiter
We are pleased to offer you tips on how to responsibly combine AI with your unique qualities, ensuring that 'your recruitment process' truly represents you. Not sure if this vacancy is right for you? Please contact me.