Senior Red Team Operator

This job in a nutshell

Would you like to effect global change within the world’s largest consulting organization? At Deloitte. Benefits

• You’ll receive a profit-sharing bonus, on top of your fixed salary.
• Continuous professional growth. Join our development program.
• A work-from-home office setup allowance to make sure you have everything you need for an ergonomically designed workstation and internet allowance.
• Work part-time (32 hours a week) or full-time (40 hours a week).
• Flexible and hybrid working, in accordance with team and client commitments.
• 26 days of paid annual leave, and the opportunity to purchase additional leave.
• A good mobility scheme: the choice of various options such as a lease car, travel by public transport, a cash option or a combination of these.
• A laptop and iPhone. The iPhone can also be used for personal purposes.
• A time for time arrangement that creates flexibility for personal moments that matter.
• A good pension scheme with a personal contribution of only 2%.
• An opportunity to take part in our collective health insurance scheme.
• An opportunity to benefit from tax-efficient facilities such as company fitness, a bicycle scheme or the opportunity to lease a bicycle.
• The opportunity to use 55 hours of babysitting service per calendar year if your child is 12 years old or younger.
• A flexible budget, which you can use to make choices in flexible benefits, for example purchasing extra leave days or financing a bicycle plan.
• Various leave options tailored to meet your individual needs, from parental leave (also for rainbow families) to the flexibility of exchanging three national holidays for non-national holidays.

Be the true you

• Deep knowledge of AI technologies to include: AI code development and GenAi offensive security assessments.
• A passion for offensive security and Red Team operations, and a drive to stay up to date with modern attack techniques, public breaches, and new vulnerabilities.
• At least two years of Red Team experience.
• Experience with conducting open-source intelligence gathering against companies and their associate people, networks, and technologies.
• Experience with technologies like Windows and Azure Active Directory, WMI, WinRM, and the ability to script/program using PowerShell, C#, C, Python, Go, Nim, Bash for offensive purposes.
• Experience designing, building, maintaining, and utilizing covert C2 infrastructure in various cloud platforms and environments. Automation experience is a plus!
• Hands on experience working with tools like Cobalt Strike, Nighthawk C2, GoPhish, Bloodhound, Impacket, Mimikatz, Kekeo, Rubeus, socat and the Windows Sysinternals suite.
• Experience with modern payload obfuscation techniques.
• Excellent technical communication skills and fluency in written and spoken English as it is the primary language of the team.
• Relevant certifications such as OSCP, OSEP, OSED, OSEE, CRTP, CRTE, etc. are preferred.
• Self-motivated people who thrive on having the time and resources to dive into research or development work.

What impact will you make?

Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

How do you do this?

• Utilize expertise in AI and AI code development to conduct continuous development and improvement of Red Team capabilities to include agentic applications.

• Leading a small team of Red Team Operators in the planning, execution, and reporting of Red Team engagements around the globe.

• Ensuring adherence to the Rules of Engagement during every step of the Red Team engagements.

• Working closely with the Red Team Manager to constantly improve and evolve the Red Team

• Lead planning, execution, reporting, and or red team campaigns by

• Performing Open-Source Intelligence Gathering against target networks, people, and technologies.

• Find creative ways to obtain a foothold in a target network.

• Deliver payloads and establish command and control

• Move stealthily within target networks satisfying the campaign objectives while staying undetected.

• Establish persistence, strategically tune long-haul beacons for maintaining footholds where necessary.

• Assist in the management of the Red Team Attack Network and the implementation of new tools and techniques to improve the team’s tradecraft.

• Share your research within the Deloitte Global Red Team community, and with the broader security organization, by writing blogs, speaking at conferences, or publishing code.

• Develop operational processes, field manuals, and attack methodologies to continuously improve the quality of engagements and knowledge sharing amongst the team.

• Ensure deliverables are of a quality nature, a campaign is only as good as the report delivered.