About the role
• Individuals with technical expertise on one or more cyber security or information security topics
• Recognized as consultant for cyber domains with internal teams and business.
• Assist functional head in building technical capabilities, strategic cyber roadmaps and team competencies based on priorities and policies of Group and GSC.
• Work as technical expert for the domain(s) and execute cyber programs of medium to complex nature and support in delivery.
• Help functional manager in identifying technical loopholes in processes and interdependencies.
• Develop holistic solutions and manage transversal cyber programs.
• Act as a consultant on key cyber topics.
• Stakeholder management and relationship building with technical counterparts Individuals with technical expertise on one or more cyber security or information security topics.
• Recognized as consultant for cyber domains with internal teams and business.
• Assist functional head in building technical capabilities, strategic cyber roadmaps and team competencies based on priorities and policies of Group and GSC.
• Work as technical expert for the domain(s) and execute cyber programs of medium to complex nature and support in delivery.
• Help functional manager in identifying technical loopholes in processes and interdependencies.
• Develop holistic solutions and manage transversal cyber programs.
• Act as a consultant on key cyber topics.
• Stakeholder management and relationship building with technical counterparts.
7 to 10 years of relevant work experience in Infrastructure Penetration Testing, Network Security Assessments, Red Teaming, or related areas
Expert in conducting infrastructure penetration testing across internal networks, external network perimeters, cloud environments, and hybrid infrastructures
Perform network, server, and system‑level security assessments including on‑prem, cloud (AWS/Azure/GCP), and virtualization platforms
Identify vulnerabilities, misconfigurations, weak authentication mechanisms, insecure protocols, and privilege escalation paths
Perform Active Directory security assessments including Kerberos attacks, NTLM abuse, delegation issues, lateral movement, and domain persistence techniques
Execute external and internal network assessments, VPN testing, firewall rule reviews, and segmentation testing
Conduct configuration review for operating systems, servers, devices, and security controls using CIS benchmarks and hardening guidelines
Validate security of identity and access management (IAM), authentication, authorization, password policies, and privilege models
Perform post‑exploitation activities such as pivoting, credential harvesting, lateral movement, and data exfiltration simulations
Prepare detailed penetration testing reports including risk rating, impact analysis, proof‑of‑concept, and remediation guidance
Communicate findings clearly to technical and non‑technical stakeholders
Infrastructure & Network Knowledge
• Strong understanding of networking concepts: TCP/IP, DNS, DHCP, SMTP, HTTP/S, SNMP, VPNs, firewalls, IDS/IPS
• Thorough understanding of enterprise infrastructure architectures
• Hands‑on experience with Windows, Linux, and Unix operating systems
• Knowledge of security standards, frameworks, and methodologies (OWASP, MITRE ATT&CK, NIST, ISO 27001, PTES)