Senior Security Engineer - Red Team

About Atos Group

Atos Group is a global leader in digital transformation with c. 67,000 employees and annual revenue of c. €10 billion, operating in 61 countries under two brands — Atos for services and Eviden for products. European number one in cybersecurity, cloud and high performance computing, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is the brand under which Atos SE (Societas Europaea) operates. Atos SE is listed on Euronext Paris.

The purpose of Atos Group is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to the development of scientific and technological excellence. Across the world, the Group enables its customers and employees, and members of societies at large to live, work and develop sustainably, in a safe and secure information space.

About Eviden

Eviden is the Atos Group brand for hardware and software products with c. € 1 billion in revenue, operating in 36 countries and comprising four business units: advanced computing, cybersecurity products, mission-critical systems and vision AI. As a next-generation technology leader, Eviden offers a unique combination of hardware and software technologies for businesses, public sector and defense organizations and research institutions, helping them to create value out of their data. Bringing together more than 4,500 world-class talents and holding more than 2,100 patents, Eviden provides a strong portfolio of innovative and eco-efficient solutions in AI, computing, security, data and applications.

Role Overview:

This is NOT another consultancy hamster wheel where you spend your week glued to Burp Suite and Word running the same tired web/API/fat client playbook on Monday and shipping the same predictable report on Friday.

Here, you operate.

You’ll emulate real world threat actors and run full scale attack campaigns across complex environments. No two projects are the same: one week you’re building and operating red team infrastructure, the next you’re tearing through external attack surface, pivoting deep inside networks, or pressure-testing detection and response in real time.

At the same time, this isn’t just adversary simulation. You’ll also conduct penetration tests across a wide variety of targets, using them as a foundation, not the ceiling, for deeper, more creative offensive work.

We’re looking for builders and operators, people who don’t only follow checklists, but think in chains, and have an offensive mindset. People who automate the boring parts so they can focus on the interesting ones.

If you want comfort and routine, this isn’t it. If you want to operate like an actual attacker - welcome.

Key Responsibilities:

• Plan and execute advanced red team operations, including adversary emulation and scenario-based testing.
• Develop and maintain custom tooling for offensive security operations.
• Perform vulnerability assessments, exploit development, and post-exploitation activities across diverse environments.
• Conduct reconnaissance, initial access, lateral movement, and persistence techniques using C2 frameworks.
• Analyze and reverse engineer applications, binaries, and protocols.
• Collaborate with blue teams to improve detection and response capabilities.
• Research and publish technical blog articles, CVEs, and open-source tools.
• Participate in CTFs, bug bounty programs, and contribute to the security community.
• Share knowledge across teams and mentor junior engineers.

Required Skills & Experience:

• Penetration testing and red teaming experience.
• Solid background in system administration and software development.
• Deep understanding of vulnerabilities and exploitation techniques.
• Proficiency in at least one programming language (e.g., Python, C/C++, Go).

Experience with:

• BurpSuite, Nmap, Nessus, and other scanning tools
• Cloud environments (AWS, Azure, GCP)
• Active Directory and EntraID
• Familiarity with networking fundamentals and operating systems (Windows, Linux)
• Strong communication and documentation skills.  

Preferred Qualifications (Nice-to-Have):

• Experience in incident response and threat hunting.
• Certifications such as OSCP, CRTO, CRTL, OSEP, OSWE, OSED, CPTS, CAPE, CWES, CISSP.
• Contributions to CVEs or security research.

What We Offer: 

• Work in a dynamic, international environment. 
• Opportunities for professional growth and involvement in strategic projects. 
• Competitive salary and benefits package. 
• Hybrid working model.

Let’s grow together.