About the role
Requirements:
- 5-7 years of information security background is essential.
- 3 years in a dedicated Red Teaming/Offensive Security role.
- Preferably within the financial or banking sector and at least 1 year leading red team operations.
- Hands-on experience in conducting covert security assessments, including physical, network, application, and social engineering scenarios.
- Proficiency in exploiting vulnerabilities, bypassing security controls, lateral movement, privilege escalation, and exfiltration techniques.
- Strong understanding of operating systems, networks (wired/wireless) and networking protocols, Active Directory, cloud platforms, phishing, and web applications.
- Should have experience in performing web application, API, infrastructure, and mobile application (Android and iOS) security assessments. Expertise in assessing applications based on OWASP methodology.
- Good practical understanding of MITRE ATT& CK tactics, techniques, and procedures (TTPs) used by advanced persistent threats (APTs).
- Analytical thinking, creativity, and adaptability in dynamic attack scenarios.
- Excellent communication skills to explain technical findings to non-technical audiences and work effectively within multi-disciplinary teams.
- Excellent written and oral communication and presentation skills.
- Proficiency in command-and-control (C2) frameworks (e. g., Cobalt Strike, Sliver, and Mythic) and script development (Python, PowerShell, Bash, or Go).
- Development and deployment of custom exploits and payloads that can be used to test specific system vulnerabilities.