Red Team Technical Lead

The Red Team Technical Lead will lead and coordinate the design, development, and operation of red team infrastructure and R&D capabilities to support red team operations within NATO's Cyber Security Centre. The role involves managing research and development activities, mentoring team members, and evolving capabilities to reflect real-world cyber threats and emerging technologies.

Responsibilities

• Lead and coordinate the design, development, and operation of red team infrastructure and R&D capabilities in direct support of red team operations.
• Collaborate with Red Team Operator Leads to tailor infrastructure and tooling to mission needs.
• Ensure operational security for the deployed infrastructure.
• Manage Red Team research and development activities with the goal of developing and utilizing automation, custom tools, scripts, and malware to replicate sophisticated cyber threats and evade detection mechanisms.
• Advise and mentor team members, and continuously evolve capabilities to reflect real-world threat actors and emerging technologies.
• Maintain documentation and secure configurations for repeatable operations.
• Provide and maintain red team operation infrastructure, offline automation and technical assistance (AI), C2, payloads.
• Oversee the management and development of cyber range capability in support of operation / R&D.

Requirements

• A Master’s degree at a nationally recognised/certified University in a related discipline and 5 years post-related experience. Or a Bachelor’s degree with 8 years post related experience.
• Cybersecurity oriented certification such as CRTP, GPEN, GWAPT, OSCP, OSCE, OSEE, GXPN, Red team operator related certification, GREM.
• At least 5 years practical experience working in cybersecurity field (security analyst/engineer, vulnerability researcher, penetration testing, red teaming, security architect).
• In-depth knowledge of adversary emulation, red teaming and purple teaming.
• Understanding of tactics, techniques and procedures of threat actors based on MITRE ATT&CK Framework.
• Understanding of the various types of detections available (defence in depth) and how to bypass them.
• Ability to create and use custom tools to automate and optimize red team engagements.
• Technical knowledge in system and network security, authentication and security protocols, cryptography and application security.
• Proven experience leading interdisciplinary teams, preferably in international environment.
• Knowledge of vulnerability assessment and penetration testing methodologies.
• Proficiency in Red team tools and technologies.
• Knowledge of the latest security trends and best practices.
• Excellent communication and negotiation skills across technical, non-technical and Executive audience.
• Strong analytical and problem-solving skills, with the ability to make data-driven decisions.
• Fluency in English, both written and spoken.

Skills

• Cyber Security Certification
• Red Teaming
• Adversary Emulation
• Purple Teaming
• MITRE ATT&CK Framework
• Threat Actor Tactics
• Detection Evasion
• Custom Tool Development
• System Security
• Network Security
• Security Protocols
• Cryptography Technology
• Application Security
• Vulnerability and Risk Assessment
• Basic Penetration Testing
• Red Team Tools
• Security Trends
• Team Leadership
• Research and Development
• Technical Communication

Languages

English