We are looking for a Leader to head the Red Team and directly influence the information security strategy of T-Technologies Group.
The Red Team at T-Technologies Group is not a classic pentest and one-off audits. It is a product within the Information Security Department with its own mission, OKRs, metrics, and direct impact on the protective systems of the entire company.
How We Work
- We build processes according to the Purple Teaming model. Red Team is closely integrated with Threat Hunting, CSIRT, Threat Intelligence, Risk Management, Vulnerability Management, and Infrasec.
- We generate discovery tasks for adjacent products from each attack, new detection rules, and updated security system configurations.
- We operate on the scale of big tech while maintaining freedom for research. Our infrastructure includes thousands of systems, hundreds of technologies, and critical financial services.
- We expertly select targets for attacks based on TI data, threat landscape, and business priorities. We create full-fledged APT simulations, develop undetectable tools, and test new types of attacks.
Responsibilities
- Be responsible for achieving goals in terms of quantity and quality of attack scenarios. Current volume: 20+ attack scenarios, 12+ APT simulations, 24+ tool tests per year.
- Plan and coordinate offensive operations: target selection, scenario development, execution control.
- Implement and develop methodologies for prioritizing attack targets based on asset criticality, TI data, coverage gaps, and stakeholder requests.
- Organize purple-teaming activities, communicate with Threat Hunting, CSIRT, InfraSec.
- Manage the process of transferring discovery tasks to adjacent Information Security Department products.
- Monitor SLA for processing incoming offensive requests.
- Develop the BAS platform: attack automation, expanding Kill Chain coverage.
- Oversee research activities: new TTPs, tool development, PoCs.
- Integrate Threat Intelligence data into attack operations.
- Present the team's results: speak at internal and external venues.
- Communicate with stakeholders: Risk Management, CIRT, Vulnerability Management, Information Security Department management.
- Foster a culture of Continuous Testing.
Requirements
- You have at least one year of experience managing a team or working as a technical lead in offensive or security areas.
- You have worked in the financial sector or large technology companies.
- You have experience working in a product structure: with OKRs, metrics, stakeholder management.
- You have implemented or worked with BAS platforms: Caldera, Atomic Red Team, or custom solutions.
- You have applied LLM/AI in the context of Offensive Security or automation.
- You have developed undetectable tools: Evasion, Custom C2, Loader Development.
- You have conducted full-scale red-team operations – from Initial Access to Objectives.
- You have worked with corporate infrastructure: Active Directory, FreeIPA, network segmentation, endpoint technologies.
- You have experience in Purple Teaming: interacted with Blue Team, developed detections together, transferred artifacts.
- You have experience developing tools: modifying open-source tooling, scripting – Python, Go, C/C#, PowerShell.
- You have a deep understanding of MITRE ATT&CK, Kill Chain, APT group TTPs.
- You understand the operation of security systems – EDR, SIEM, NTA, WAF – and methods of bypassing them.
- You can plan and prioritize team work, set goals, track results.
- You can present results to technical and managerial audiences.
- You know Threat Intelligence methodologies, have worked with TI feeds and APT reports.
- You have organized and conducted IR exercises.
- You have presented at cybersecurity conferences, published articles, and contributed to Open Source.
We Offer
- Hybrid schedule and an office near the "Belorusskaya" metro station, equipped with everything you need: T-Clinic, beauty salon, fitness areas, sleep and meditation rooms. If you want to work in the fresh air – a terrace with a panoramic view.
- Opportunity to work in an accredited IT company.
- Voluntary medical insurance with dental care, including check-ups, medication cost compensation, and preferential insurance terms for loved ones. Also, accident and illness insurance.
- Career growth: take courses in soft and hard skills, develop with mentor support, and increase your level with a competency matrix and regular reviews.
- Strong community. You will work with experts in your field, share knowledge, speak at conferences, attend meetups, and write articles.
- Online consultations with psychologists, lawyers, financial and healthy lifestyle specialists.
- Reimbursement for sports club memberships, the T-Sport app for online classes, and team training with colleagues.
- Breakfasts and lunches at T-Cafe. The office has a restaurant and coffee shops, and there are kitchens on each floor for snacks.
- 3 additional days to your vacation – can be used for rest or compensated.
- Special rates on T-Bank products and a wide discount program from partners.
- Competitive salary – we will discuss it during the interview.
