Experienced Red Team Operator

At Northwave, 275 cybersecurity specialists transform how organisations approach digital safety. From our HQ in Utrecht, along with offices in Germany, Sweden, and Belgium.

Northwave combines ethical hacking expertise with behavioral psychology insights and cutting-edge security management at the highest level. We respond to threats and anticipate them, providing 24/7 managed security services and tailored solutions for each client's journey.

By joining Northwave, you’ll become part of an organisation where innovation drives results, whether your talents lie in technical penetration testing or strategic client partnerships. Here, your expertise will grow and help shape the future of digital security across industries, leaving a lasting impact.

The team you will join 

Our Red Team brings together 15 ethical hackers with expertise spanning adversary simulation, social engineering, Active Directory and Entra ID, malware and tooling development, cloud, application security, reverse engineering and exploitation. We challenge one another, share techniques openly and combine the right skills for each operation. 

You will also work closely with our Threat Intelligence, Blue Team, Reverse Engineering and CERT specialists. Insights from real incidents and current threats help us build credible scenarios. Purple teaming turns each exercise into practical improvements for our clients. 

What you will do 

• Design and execute realistic attack scenarios against critical business processes and systems. 

• Operate across the full attack chain: reconnaissance and initial access, command and control, privilege escalation, lateral movement and actions on objectives. 

• Deliver threat-intelligence-led ART and TIBER exercises, alongside other advanced red team and purple team engagements. 

• Build or adapt tooling, infrastructure and payloads when an operation requires it. 

• Make sound OPSEC and risk decisions while working in live client environments. 

• Translate technical activity into clear lessons for defenders, technical leaders and executives. 

• Improve our tradecraft by researching new techniques, developing TTPs and sharing what you learn with the team. 

How an engagement works 

We start by understanding the organisation, its critical functions and the threat actors it faces. Together with the client and control team, we turn that context into objectives, attack scenarios and clear Rules of Engagement. 

During execution, you will have room to adapt. The aim is not to follow a checklist, but to emulate a credible adversary without losing sight of safety or learning value. We close with transparent reporting, executive and technical presentations, and often a purple teaming session in which attacks are replayed with the defenders. 

What you can expect from us 

Serious red team work requires trust, time to learn and colleagues who can challenge your thinking. We offer: 

• Complex, multi-week adversary simulation assignments with meaningful objectives. 

• A team of specialists who share knowledge and bring different perspectives to an operation. 

• Direct collaboration with offensive, defensive, threat intelligence, reverse engineering and incident-response experts. 

• Time and budget for training, certifications, conferences and longer development programmes. 

• Professional equipment and the tooling needed to do your work well. 

• Hybrid working with access to our offices in Belgium, Germany, the Netherlands and Sweden. 

• A competitive local compensation and benefits package. Salary, leave, pension, mobility and allowances differ by country. Our recruiter will explain the package that applies to your location. 

• Room to influence our methods, tooling and the future of our red team services as demand grows.