search Browse Jobs
Experienced Red Team OperatorNorthwave Cyber Security · Utrecht, Utrecht, Netherlands
Northwave Cyber Security logo

Northwave Cyber Security

company page ↗

Experienced Red Team Operator

🗓️ Posted 2026-09-01 Utrecht, Utrecht, Netherlands Full-time Hybrid ICT
💰 Salary 5,500 EUR–8,560 EUR/mo (66,000 EUR–102,720 EUR/yr) 📊 Market 4,500 EUR–7,000 EUR/mo

About the Company

At Northwave, 275 cybersecurity specialists transform how organisations approach digital safety. From our HQ in Utrecht, along with offices in Germany, Sweden, and Belgium. Northwave combines ethical hacking expertise with behavioral psychology insights and cutting-edge security management at the highest level. We respond to threats and anticipate them, providing 24/7 managed security services and tailored solutions for each client's journey. By joining Northwave, you'll become part of an organisation where innovation drives results, whether your talents lie in technical penetration testing or strategic client partnerships. Here, your expertise will grow and help shape the future of digital security across industries, leaving a lasting impact. The team you will join Our Red Team brings together 15 ethical hackers with expertise spanning adversary simulation, social engineering, Active Directory and Entra ID, malware and tooling development, cloud, application security, reverse engineering and exploitation. We challenge one another, share techniques openly and combine the right skills for each operation. You will also work closely with our Threat Intelligence, Blue Team, Reverse Engineering and CERT specialists. Insights from real incidents and current threats help us build credible scenarios. Purple teaming turns each exercise into practical improvements for our clients.

Responsibilities

  • ● Design and execute realistic attack scenarios against critical business processes and systems.
  • ● Operate across the full attack chain: reconnaissance and initial access, command and control, privilege escalation, lateral movement and actions on objectives.
  • ● Deliver threat-intelligence-led ART and TIBER exercises, alongside other advanced red team and purple team engagements.
  • ● Build or adapt tooling, infrastructure and payloads when an operation requires it.
  • ● Make sound OPSEC and risk decisions while working in live client environments.
  • ● Translate technical activity into clear lessons for defenders, technical leaders and executives.
  • ● Improve our tradecraft by researching new techniques, developing TTPs and sharing what you learn with the team.
  • ● Complex, multi-week adversary simulation assignments with meaningful objectives.
  • ● A team of specialists who share knowledge and bring different perspectives to an operation.
  • ● Direct collaboration with offensive, defensive, threat intelligence, reverse engineering and incident-response experts.
  • ● Time and budget for training, certifications, conferences and longer development programmes.
  • ● Professional equipment and the tooling needed to do your work well.
  • ● Hybrid working with access to our offices in Belgium, Germany, the Netherlands and Sweden.
  • ● A competitive local compensation and benefits package. Salary, leave, pension, mobility and allowances differ by country. Our recruiter will explain the package that applies to your location.
  • ● Room to influence our methods, tooling and the future of our red team services as demand grows.

Requirements

  • ● Several years of hands-on penetration testing or red team experience, including responsibility for planning and executing operations.
  • ● Strong attack-path knowledge in Windows and Active Directory environments.
  • ● Experience with Entra ID or other cloud environments.
  • ● Practical command-and-control, OPSEC and infrastructure skills.
  • ● The judgement to balance operational objectives, client safety and learning value.
  • ● Clear written and spoken English, with the ability to explain decisions and findings to both technical and non-technical audiences.
  • ● A collaborative approach: you ask for a second pair of eyes, share what worked and help others improve.
  • ● Eligibility to work from Belgium, Germany, the Netherlands or Sweden, and willingness to travel for client work when an engagement requires it.
  • ● Experience delivering ART, TIBER or another structured threat-led red team framework.
  • ● Depth in one or more areas such as social engineering, malware development, cloud, application security, exploit development or reverse engineering.
  • ● Relevant certifications such as OSCP, OSEP or CRTO. We value demonstrated capability and sound judgement more than a checklist of certificates.
  • ● Another European language in addition to English.