Key Skills

Job Description

This job in a nutshell Simulate real-world cyber threats, develop innovative tradecraft, and execute covert operations in complex IT environments. At Deloitte. Benefits You’ll receive a profit-sharing bonus, on top of your fixed salary. Continuous professional growth. Join our development program. A work-from-home office setup allowance to make sure you have everything you need for an ergonomically designed workstation and internet allowance. Work part-time (32 hours a week) or full-time (40 hours a week). Flexible and hybrid working, in accordance with team and client commitments. 26 days of paid annual leave, and the opportunity to purchase additional leave. A good mobility scheme: the choice of various options such as a lease car, travel by public transport, a cash option or a combination of these. A laptop and iPhone. The iPhone can also be used for personal purposes. A time for time arrangement that creates flexibility for personal moments that matter. A good pension scheme with a personal contribution of only 2%. An opportunity to take part in our collective health insurance scheme. An opportunity to benefit from tax-efficient facilities such as company fitness, a bicycle scheme or the opportunity to lease a bicycle. The opportunity to use 55 hours of babysitting service per calendar year if your child is 12 years old or younger. A flexible budget, which you can use to make choices in flexible benefits, for example purchasing extra leave days or financing a bicycle plan. Various leave options tailored to meet your individual needs, from parental leave (also for rainbow families) to the flexibility of exchanging three national holidays for non-national holidays. Be the true you You are an offensive security enthusiast, finding creative ways to break into highly secured environments and laterally move to obtain access to the most critical assets. You do all this staying under the radar of Blue Teams and sysadmins. You are keen on researching new techniques and developing solutions to reach your goals. For the role of Red Team specialist, you also have: Mastered C2 frameworks like Mythic, Cobalt Strike, Brute Ratel, Nighthawk. A track record of obtaining initial footholds in mature enterprise environments. Experience evading Endpoint Detection and Response (EDR) solutions like Microsoft Defender for Endpoint, CrowdStrike, Elastic, SentinelOne, and Trellix. Advanced knowledge of common enterprise technologies such as Active Directory and Azure/Entra ID. Programming experience in languages such as C/C++, C#, PowerShell, Python and bash. A creative mindset to the entire cyber kill chain from obtaining initial access to achieving objectives that align with organization-specific business risks (not just “Domain Admin”!). Conducted Red Team operations in complex environments, e.g., TIBER-EU, ART, CBEST. A passion for R&D with experience crafting your own tools and a drive to stay up-to-date with attack techniques and vulnerabilities. Worked proficiently with offensive tooling like Impacket, Mimikatz, Kekeo, BloodHound, Rubeus, socat and Sysinternals suite. Good communication skills and fluency in English. While not mandatory, relevant certifications can be an advantage (e.g., OSEP, OSED, OSEE, CRTO, CRTL, CRTE, CCRTS/CCSAS). It’s a plus if you have presented at security conferences or written technical blogs and whitepapers. What impact will you make? We take a proactive approach to strengthening organisational resilience through ethical hacking. As a Red Team specialist, you will work in a highly skilled team to perform Red Team exercises for our international clients. Using your offensive skills and experience, you will covertly breach our clients’ networks and provide recommendations to strengthen the client’s security posture. To sharpen your skills, you will perform research on the latest techniques and tools, join and share insights at our Deloitte Global Red Team knowledge exchange sessions. How do you do this? Finding creative ways to obtain a foothold in a client's network. Applying an adversary mindset to simulate sophisticated actors and achieve project-specific objectives. Covertly traversing the network, avoiding detection. Performing research, developing your own tools, and sharpening your tradecraft. Sharing your research within the Deloitte Global Red Team community and with the broader security community, for example writing blogs, speaking at conferences, or publishing code. Turning security weaknesses into tailored and concrete recommendations which you will present to clients. Follow-up to Red Team exercises with Purple Team workshops to help our clients’ defensive teams to identify tactics, techniques, and procedures (TTPs) used by real-world adversaries.

Core Responsibilities

Conduct covert Red Team exercises for international clients, simulating sophisticated adversaries to gain network access, move through environments undetected, and achieve objectives tied to business risks. Research and develop offensive tools and techniques, share findings with the security community, provide tailored security recommendations, and support client defenders through Purple Team workshops.

Requirements

The role calls for an experienced offensive security specialist with a track record of gaining footholds in mature enterprise environments and conducting complex Red Team operations. Candidates should have strong knowledge of C2 frameworks, EDR evasion, enterprise identity technologies, programming, offensive tools, and security research; relevant certifications and public security contributions are advantageous.

Benefits

• Profit-Sharing Bonus
• Professional Development Program
• Home Office Setup Allowance
• Internet Allowance
• Flexible and Hybrid Working
• Paid Annual Leave
• Additional Leave Purchase Option
• Mobility Scheme
• Laptop and iPhone
• Time-for-Time Arrangement
• Pension Scheme
• Collective Health Insurance
• Company Fitness Benefit
• Bicycle Scheme
• Babysitting Service
• Flexible Benefits Budget
• Parental Leave