Senior Red Team Operator

About the Position

Senior Red Team Operator

A role in the Global CISO Office that’s as much about breaking things as it is about building resilience.

Are you passionate about cybersecurity and driven by an adversarial mindset? Do you want to test a global financial institution against sophisticated, real-world threats?

As a Senior Red Team Operator at ING, you will be part of a hands-on team focused on strengthening the bank's security posture. We think like a criminal to test our people, processes, and technology on a global scale. Your mission will be to simulate the tactics, techniques, and procedures (TTPs) of advanced threat actors, providing critical assurance to the business and its leadership.

This is not a standard penetration testing role. We are looking for a specialist in red teaming who can plan and execute long-term, intelligence-led campaigns while maintaining exceptional operational security (OPSEC).

Responsibilities

• Lead advanced red team engagements. Design and conduct complex, long-run red team campaigns that mirror the sophistication of top-tier, intelligence-led exercises. You will test our global enterprise, including on-premise, cloud (Azure, Google Cloud), and hybrid environments.
• Execute the full attack lifecycle. Run objective-driven, end-to-end red team campaigns, from initial access to data exfiltration, while employing stealth to evade our Blue Team.
• Develop and maintain red team infrastructure. Build, operate, and customize the team's command-and-control (C2) infrastructure. You will be expected to go beyond using standard tools like Cobalt Strike or Sliver, developing bespoke capabilities to ensure operational success.
• Drive defensive improvements through purple teaming. Partner directly with our SOC and defensive teams in collaborative purple team exercises to tune detection rules, improve playbooks, and enhance ING’s defensive capabilities.
• Develop custom tooling to bypass advanced defences. Research emerging TTPs and create your own tools, implants, and loaders in languages like C++, C#, or Go to bypass modern security controls like EDR and application allow-listing.
• Deliver actionable insights to the business. Author comprehensive, narrative-style reports that translate complex technical findings into clear, actionable recommendations for executive stakeholders.

Requirements

• 5+ years of hands-on experience in a dedicated red team role.
• Strong development skills in at least one low-level language (e.g., C++, C#, Go, Rust) for custom tool development, and proficiency in a scripting language (e.g., Python, PowerShell).
• Deep experience attacking complex enterprise environments, including Active Directory and major cloud providers (Azure, AWS, GCP).
• A strong Operational Security (OPSEC) mindset with a proven ability to conduct covert, objective-driven operations.
• Advanced offensive security certifications, such as OSEP, OSCE/OSEE, CREST CCSAS, GXPN, or CRTO, are a significant plus.
• Fluent in English, both verbally and in writing.

We Offer

• Flexible work model: Work from home or the office, as per your preference.
• Restaurant card for convenient lunch options.
• Comprehensive health and life insurance for you and your family.
• Flexible remuneration model with additional benefits like nursery support, transport card, and training aids.
• Transport allowance to help you commute to the office.
• Pension plan benefits starting from your first month with us.

About the Company

At ING, we are more than just a bank-we are a tech company that happens to do banking. Our new hub in Spain will be a center of excellence for scalable, fast, and secure technology. We have a global impact, serving over 34 million customers in more than 38 countries. We are agile, sustainable, and committed to diversity, inclusion, and belonging.

We’re looking for curious minds, bold builders, and passionate problem-solvers. If you’re looking for a place to find new ways to drive efficiency and provide superior customer value, where your ideas matter, and where you can grow with purpose-we’re looking forward to meeting you.