Job Description

Join CR14 to design and execute realistic cyber attack scenarios, support cyber exercises, and help Estonia and friendly countries strengthen their cyber defence capabilities through adversary emulation and red team operations.

Key Responsibilities

Research and maintain knowledge of current cyber threat actor TTPs.
Design and execute cyber threat simulations and red team activities.
Collaborate with customers to define exercise objectives and requirements.
Build and manage attack infrastructure and supporting tooling.
Lead and coordinate red team activities during exercises.
Map adversary behaviour to the MITRE ATT&CK framework.
Document activities, findings, and lessons learned.
Produce reports and recommendations for participants.
Deliver guidance and training on cyber threat detection and response.
Support scenario design, penetration testing, and cyber exercise innovation.

Ideal candidate

Degree in Cyber Security, IT, Computer Science, or a related field, or equivalent relevant professional experience.
Significant experience in red teaming, threat emulation, or penetration testing.
Strong understanding of cyber threats, attack techniques, and offensive security tools.
Experience applying the MITRE ATT&CK framework.
Scripting and automation skills (Python, PowerShell, Bash, etc.).
Understanding of defensive security operations and incident response.
Strong communication, planning, and stakeholder management skills.
Willing to apply for security clearance.

Bonus to Have

Certifications such as OSCP, OSEP, CRTO, GXPN, GPEN, or CEH.
Experience delivering cyber exercises or security training.
Knowledge of cloud platforms and Infrastructure as Code.
Experience with attack infrastructure and adversary emulation frameworks.
Exposure to defence, government, or NATO-related cybersecurity environments.

We offer

Meaningful work
International cyber security community
Continuous learning and professional growth opportunities
35 days of annual leave, and additional 1 extra day off each quarter, altogether 39 days of paid vacation a year
Employer-provided health insurance (after the probation period)
Stebby sports compensation (after the probation period)
Salary maintained during reservist training exercises
Average salary (based on the previous 6 months) paid for the first 3 days of sick leave
An innovative and driven work environment in a modern office in the heart of Tallinn, with dedicated desks for every employee
Enjoyable team events every few months!