Senior Red Team Lead

Executing complex attack campaigns is one thing; taking full control of an intelligence-driven operation at the country’s most critical organizations is a skill in its own right.

We’re looking for an experienced Red Team Lead who maintains a big-picture perspective where it matters most.
In this role, you’ll have operational and technical leadership over TIBER, TLPT, and other Red and Purple Teaming assessments within the banking sector, healthcare, government, and critical infrastructure sectors. You’ll lead specialists at the intersection of social engineering, software development, exploitation, and OT, and serve as a trusted advisor to boards of directors and CISOs. You know how to help Blue Teams learn as much as possible from an operation while simultaneously elevating our offensive security capabilities and methodology to the next level.

What will you be performing?

• Ultimate responsibility for Red and Purple Teaming assessments: You will lead large- and small-scale, intelligence-driven assessments (such as Red Teaming, TIBER-EU/NL, and DORA TLPT) from initiation and threat modeling through to the final reporting and replay phase.
  Operational leadership: You’ll manage multidisciplinary teams (social engineers, red teamers, exploit specialists) and get hands-on yourself during complex phases such as advanced evasion or initial access.
• Scenario and Risk Management: You translate Targeted Threat Intelligence (TTI) into credible MITRE ATT&CK attack scenarios and, during the operation, closely monitor the Rules of Engagement and operational risks in collaboration with the Control Team.
• Strategic Sparring Partner: You serve as a Trusted Advisor and primary point of contact for CISOs, executive management, and regulators, translating complex technical risks into strategic decision-making insights.
• Maximizing Impact Through Purple Teaming: After the active phase, you lead the replay workshops and help Blue Teams and SOC/detection engineers measurably improve their detection and response times.
• Quality Assurance: You review deliverables and reports to ensure their content is irrefutable and directly drives action.
• Mentoring: You coach operators on their technical skills and tradecraft, continuously raising the team’s overall level.
• R&D and Innovation: You’ll drive the development of custom tools, C2 infrastructure, and research into new attack techniques to ensure we’re always one step ahead of threats.

Your Profile

• Extensive experience in Offensive Security, Red Teaming, or Adversary Simulation.
• A proven track record in leading (regulated) adversary simulations (TIBER-NL/EU, TLPT, ART) from scoping to replay.
• Experience with stakeholder management and presenting results to management and executive-level audiences.
• Technical expertise in enterprise and cloud infrastructures (Windows/Linux, hybrid AD/Entra ID, AWS/Azure), C2 tradecraft, and advanced evasion.
• Experience with risk management, rules of engagement, and live de-confliction during active operations.
• Strong advisory skills at the management and executive levels (CISO, Board) and the ability to clearly convey impact in Dutch and English.
• Relevant certifications (e.g., OSEP, CRTE/CRTO II, GXPN, or equivalent).
• The ability to successfully complete a screening or security clearance for work in critical and financial infrastructure.

What can you expect from us?

Together with your offensive security colleagues, you’ll tackle complex operations that truly need to be performed for critical infrastructure and the business community in the Netherlands.
Think of challenges such as:

• Gaining unauthorized access: using targeted social engineering to talk your way into highly secured control rooms.
• Deep into the core: gaining a foothold remotely in isolated, mission-critical (OT) networks.
• Staying ahead of the curve: carrying out attacks against the very latest stacks and technologies.

We give you the freedom and resources to deepen your own expertise and directly help shape the future of our services.

• Growth and leadership: As Red Team Lead, you’ll play a role in the further development of our offensive security practice. You’ll have the opportunity to coach colleagues, develop new services, and increase your visibility within the cybersecurity community through publications, conferences, and knowledge sharing.
• High-Impact Projects: You’ll work with organizations where cybersecurity is of critical importance, including financial institutions, government agencies, the healthcare sector, and critical infrastructure. Thanks to our international presence within Bureau Veritas, you’ll also have the opportunity to be involved in projects outside the Netherlands.
• Culture: At Bureau Veritas, we combine technical depth with an informal and engaged culture. We invest in knowledge sharing, collaboration, and celebrating successes. From technical knowledge sessions and hack-a-thons to ski trips, sailing trips, barbecues, and other team activities: we ensure that work remains both challenging and fun.

Would you like to lead the most advanced Red Team assignments in the Netherlands and help organizations defend themselves against cyber threats? Then we’d love to meet you.
Are you interested in this position, do you have questions, or would you like to apply? You can do so via jobs.cybersecurity@bureauveritas.com

📌 Pre-employment screening and assessment are part of the recruitment process.