Red Team Specialist

Report an incident

Get 24/7 incident response assistance from our global team

• APAC: [phone removed]
• EU & NA: [phone removed]
• MEA: [phone removed]
• LATAM: [phone removed]

•

Products

The Unified Risk Platform

Prevent breaches, fraud, and brand abuse with intelligence-driven solutions powered by a single platform

Integrations

Enhance your portfolio by integrating Group-IB solutions

Products

•

Threat Intelligence

•

Attack Surface Management

•

Fraud Protection

•

Digital Risk Protection

•

Managed XDR

•

Business Email Protection

•

Cyber Fraud Intelligence

Platform

•

Cloud Security Posture

Management

Free Tools

•

Email Protection Audit Program

•

•

Messages and Files Encryption

•

•

Network Protection Assessment

•

•

Malware Reports

Integrations

Enhance your portfolio by integrating

Group-IB solutions

Learn more

•

Services

Services Retainer

From emergency support to strategic resilience in one agreement

Learn more

Assessment

• Incident Response Readiness Assessment
• Penetration Testing
• Vulnerability Assessment
• Red Teaming
• Purple Teaming
• Compromise Assessment
• AI Red Teaming
• SOC Assessment
• Tabletop Exercises

Development

• SOC Consulting
• Threat Landscape

Response

• Incident Response
• Incident Response Retainer
• Digital Forensics
• Regional Threat Readiness Program

Training

• Training for Technical Specialists
• Management Masterclasses

Hi-Tech Crime Investigation

• Cyber Investigation
• Investigation Subscription

•

Solutions

Solutions by Role

• CISO
• Head of Fraud
• Head of Brand Protection
• Head of Threat Intelligence
• SOC Manager
• Security Analyst

Solutions by Use Case

• Data Leak Detection
• Ransomware Protection
• Phishing and Scam Protection
• Bot Protection
• Business Email Protection
• Dark Web and Deep Web Monitoring
• Building CTI Program
• Vulnerability Management
• Supply Chain Attacks
• Network Security
• Data Center Security

Solutions by Industry

• Law Enforcement
• Regulatory Compliance
• Retail and e-Commerce
• Crypto Industry
• Governments
• Telecom and Service Providers
• Online Gambling and Betting
• Financial Services
• Insurance Sector
• OT/ICS Cybersecurity
• Manufacturing Industry
• Small and Medium Business
• Oil and Gas
• SaaS
• Energy and Utility
• Healthcare

Solutions by Role

• CISO
• Head of Fraud
• Head of Brand Protection
• Head of Threat Intelligence
• SOC Manager
• Security Analyst

Outrunning ransomware

Ransomware spreads quickly across networks, exploiting vulnerabiliti...

Explore solutions

Data Leaks

Implement proven secure data practices along with a comprehen...

Explore solutions

Dark Web Monitoring

Effectively safeguard your business assets against unseen risks...

Explore solutions

•

Subscription Plans

•

Resources

The world of cybersecurity in one place

Discover our resource center

Discover our resource center

AI Cybersecurity Hub

Your guide to AI innovation, adoption, and acceleration in cybersecurity

• Research Hub
• Success Stories
• Knowledge Hub
• Certificates
• Webinars
• Masked Actors
• Podcasts
• Investigations
• FAQ
• Ransomware Notes
• Cybercrime Fighters Club

Before Fraud Transacts

Modern fraud isn't an event. It's an industrialised campaign that begins weeks before the payment.

The transaction is where fraud ends, not where it happens. This paper shows how to disrupt the campaign weeks before the payment, not document it after.

Learn more

AI Cybersecurity Hub

Your guide to AI innovation, adoption, and acceleration in cybersecurity

Learn more

•

Blog

•

Company

• About Group-IB
• Team
• CERT-GIB
• Careers
• Internship
• Academic Alliance
• Sustainability
• Media Center
• Contact

•

Partners

• Partner Program
• MSSP and MDR Partner Program
• Technology Partners
• Partner Locator

•

Subscription Plans

•

Blog

•

Report an incident

•

Talk to sales

•

•

Sign inSign in

← Back to all vacancies

Share this article

Found it interesting? Don't hesitate to share it to wow your friends or colleagues

Share this article

Found it interesting? Don't hesitate to share it to wow your friends or colleagues

Saudi Arabia

Customer Success & Professional Services

Red Team Specialist

What makes the role special

Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company’s DNA, shaping its technological capabilities to defend businesses, citizens, and support law enforcement operations.

Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.

ABOUT THE ROLE

As a Red Team Specialist, you will play a crucial role in safeguarding our clients by identifying vulnerabilities and simulating real-world attacks. This role is designed for a seasoned professional who excels in offensive security techniques and thrives in challenging environments. You will be part of a dynamic team that pushes the boundaries of cybersecurity, working closely with clients to enhance their security posture through advanced penetration testing and red teaming activities.

YOUR MISSION

• Take part in red team engagements
• Develop and improve internal tools, scripts, and payloads
• Research new attack techniques, vulnerabilities and evasion methods
• Contribute to engagement reports

WHAT WE ARE LOOKING FOR

• Solid understanding of how things work under the hood: operating systems (Windows and/or Linux internals), computer networks and protocols
• Programming skills in at least one language (Python, Go, C/C++, C#, Rust or similar), enough to write your own tools rather than only use existing ones
• Proven offensive security skills: published research, bug bounty, CTF experience etc
• Understanding of common attack techniques against Active Directory, web applications or network infrastructure
• Curiosity and the habit of digging until you understand why something works

WHAT SETS YOU APART

• Low-level programming skills (C/C++, Asm, Rust, Nim)
• Experience with C2 frameworks, malware development or AV/EDR evasion, even in a lab setting
• Reverse engineering or binary exploitation experience
• Discovered vulnerabilities, CVEs, or valid bug bounty reports
• Understanding of how blue teams detect and respond to attacks
• Active participation in known CTFs
• Public writeups, blog posts, open-source tools or conference talks
• Certifications such as OSCP, CRTP or similar

WHY CHOOSE GROUP-IB

Group-IB is a global leader in cybersecurity technologies that investigate, predict, prevent, and fight digital crime. We help organizations reduce risk and protect trust. Trusted by governments, major industries, and law enforcement, we deliver adversary-focused, predictive threat intelligence and cyber fraud fusion solutions that detect, analyse, and mitigate regional and country-specific digital crimes.

• Work with real stakes. Group-IB investigates active cybercriminal groups, responds to breaches affecting critical infrastructure, and develops technologies used by law enforcement agencies including INTERPOL, Europol, and Afripol across 60+ countries. We've conducted 1,550+ cybercrime investigations alongside 600+ enterprise customers globally. When you join Group-IB, your work directly disrupts digital crime.
• Grow your way. Choose your own path: deepen your craft as a technical expert, step into leadership, move across to another team, or relocate to one of our Digital Crime Resistance Centers across the Americas, Europe, the Middle East & Africa, Central Asia, and the Asia-Pacific. Your growth is our growth — Group-IB's expansion across 60+ active country operations means real career acceleration.
• We fund professional certifications at company expense — whether you're pursuing CEH, CISSP, OSCP, or specialized certifications in forensics and penetration testing. You don't have to choose between doing the job and advancing your credentials.
• Work alongside industry leaders. Our Unified Risk Platform — Threat Intelligence, Digital Risk Protection, Attack Surface Management, Managed XDR, and more — is recognized by Gartner, Forrester, KuppingerCole, and Datos Insights. Frost & Sullivan named us a 2025 Global Technology Innovation Leader. When you work here, you're building technologies that set the industry standard.
• Real challenges, real expertise. You'll take on complex, real-world problems alongside adversary-centric researchers and incident response experts spread across six continents. We've built 21+ years of proprietary telemetry through 1,500+ joint investigations. No two threats look alike — and neither do the skills you'll develop.
• A team that is genuinely international. Our people come from different countries, speak different languages, and bring different perspectives. What connects us is a shared mission: fighting cybercrime and making the world safer. We care about your wellbeing and happiness as much as your output.

Apply for this position

Thank you! Your application has been successfully submitted. We'll be in touch soon.

Similar vacancies

Riyadh

Customer Success & Professional Services

Senior DFIR Consultant

Cairo

Customer Success & Professional Services

Unified Customer Success Manager, META

See all vacancies →