The best way to test your defence is to think like an attacker. MVPeople Group delivers red team operators, purple team specialists and adversary simulation engineers who put your detection and response capabilities to the test. With experience in TIBER-EU/NL, CBEST and MITRE ATT&CK.
Red teaming goes beyond traditional penetration testing. Where a pentest focuses on finding technical vulnerabilities, a red team simulates the full attack chain of an advanced threat actor. This includes reconnaissance, initial access via social engineering or technical exploitation, lateral movement through the network, privilege escalation and reaching strategic objectives, exactly as a real attacker would.
In the financial sector, red teaming has been formalised through the TIBER-EU framework and the Dutch implementation TIBER-NL. These intelligence-led red team tests are conducted under the supervision of De Nederlandsche Bank and are mandatory for systemically relevant financial institutions. TIBER tests require certified red team providers and operators with proven experience in advanced attack simulations.
Purple teaming is rapidly gaining popularity as a complementary discipline. By having red and blue teams work together in an iterative process, detection gaps are identified and resolved faster. Attack path analyses map the routes an attacker can take, so the defence can be specifically strengthened where it matters most.
The market for red team specialists is exceptionally tight. Experienced operators with TIBER experience and certifications such as OSCP, OSEP and CRTO are particularly scarce. MVPeople Group has an exclusive network of offensive security professionals who have earned their stripes at leading red team providers and financial institutions.
From hands-on operators to red team leads and purple team specialists: we deliver offensive security professionals for every type of engagement.
Conducts advanced attack simulations that replicate realistic threat scenarios. Uses techniques from the MITRE ATT&CK framework to expose weaknesses in detection and response. Combines technical exploitation with social engineering and physical access techniques.
Leads red team engagements from planning to reporting. Develops attack plans based on threat intelligence, coordinates the operator team and presents findings to the board and CISO. Experience with TIBER-EU/NL projects and CBEST assessments.
Bridges the gap between red and blue team through joint exercises. Validates detection capabilities, identifies gaps in security monitoring and advises on improvements in detection engineering. Works closely with SOC teams to measurably strengthen the defence.
Develops and maintains attack simulation tooling and infrastructure. Builds custom implants, C2 frameworks and evasion techniques. Automates attack scenarios and develops reusable TTPs (Tactics, Techniques and Procedures) based on current threat intelligence.
Specialist in the human aspect of attack simulations. Conducts phishing campaigns, vishing attacks and physical social engineering assessments. Tests the security awareness level of organisations and advises on targeted training and awareness programmes.
Red teaming is an advanced form of security testing where a team of offensive specialists executes realistic attack scenarios against an organisation. Unlike a penetration test, which focuses on finding technical vulnerabilities, a red team engagement simulates the full attack chain of a real threat actor: from initial access via social engineering or technical exploitation to lateral movement, privilege escalation and reaching predefined objectives.
Penetration testing focuses on identifying as many vulnerabilities as possible within a defined scope and time period. Red teaming, on the other hand, simulates a realistic attack with specific objectives, using the same techniques as real threat actors. Red teaming tests not only technical security, but also detection capabilities, incident response processes and the human factor. The scope is broader and the approach is stealthier.
TIBER-EU (Threat Intelligence-Based Ethical Red Teaming) is a European framework for conducting controlled, intelligence-led red team tests at financial institutions. TIBER-NL is the Dutch implementation, managed by De Nederlandsche Bank. A TIBER test simulates the tactics, techniques and procedures of real threat actors based on current threat intelligence. The goal is to test the cyber resilience of critical financial infrastructure.
Purple teaming is a collaborative approach where red team (attack) and blue team (defence) exercise together to improve detection and response capabilities. Instead of a confrontation, it is an iterative process: the red team executes a technique, the blue team checks whether it is detected, and together they identify gaps and implement improvements. Purple teaming often delivers concrete improvements faster than traditional red teaming.
The key frameworks are MITRE ATT&CK (for categorising attack techniques), TIBER-EU/NL and CBEST (for threat intelligence-based red teaming in the financial sector), and the Unified Kill Chain model. Additionally, frameworks such as PTES and OWASP are used for specific components. Red team operators use these frameworks to structure their attacks and report findings in a language understood by both technical and executive audiences.
Red team specialists are scarce and highly sought after in the market. We typically present suitable profiles within 5 to 10 working days, depending on the desired experience level and specific certification requirements. For TIBER projects, we advise making contact early due to the specific requirements that apply to TIBER service providers and their personnel.
Rates for red team specialists are at the upper end of the security market due to scarcity and the required specialism. The rate depends on experience level, desired certifications (OSCP, OSEP, CRTO), type of engagement and whether TIBER-qualified operators are needed. Contact us for a no-obligation indication based on your specific needs.
Lead penetration testing and red team operations for a leading international organisation. Manage technical teams, conduct advanced security assessments, and advise on cyber risk mitigation across complex environments.
Lead sales for advanced cybersecurity solutions across Dutch government, defense, and intelligence sectors. Build and own the Netherlands territory from the ground up with direct founder access.
From TIBER projects to purple teaming: we deliver the offensive security professionals who test and strengthen your defence.
