Red Team Specialist

Job Description

Job Accountabilities

Support planning and execution of red team engagements simulating real-world threat actors, attack paths, and tactics.
Conduct advanced penetration testing across web applications, APIs, mobile apps, internal/external networks, and cloud environments.
Conduct social engineering simulations (phishing, pretexting) with appropriate approvals.
Perform privilege escalation, lateral movement, and post-exploitation activities in controlled environments.
Identify gaps in detection and response capabilities and provide feedback to blue/purple teams.
Emulate adversary techniques aligned with MITRE ATT&CK framework.
Develop and execute attack scenarios based on threat intelligence and business context.
Validate effectiveness of security controls including EDR, SIEM, SOAR, WAF, and IAM.
Use and customize offensive security tools such as Metasploit, Cobalt Strike (or alternatives), Burp Suite, Nmap, BloodHound, CrackMapExec, etc.
Develop or modify custom scripts, payloads, or exploits to bypass security controls.
Perform password attacks, token abuse, and misconfiguration exploitation responsibly.
Setup/ Enhance Red Team Lab/ Weapons to improve effectiveness of Red Team Testing methodologies and technique.

Technical Knowledge & Skills on-

Understanding of MITRE Framework and Kill Chain
Experience on Open-Source Intelligent Gathering
Experience in Active Directory/ Authentication Services Security testing
Experience in Network Pentesting
Experience in infrastructure Pentesting
Experience in Red Teaming (External or Internal) and understanding of protection controls
Knowledge of Metasploit / PowerSploit / Mimikatz / Impacket / Cobalt Strike / any CnC framework
Bypass Securtiy Controls / Security Solutions

Skills Required (Knowledge and Skills)

Good understanding of system internals
Good understanding of OSI Layers and networking concepts
Understanding of common Application architecture, different components and structure
Scripting language in Python / Powershell (security testing script/ utility/ tool development
Programming language c / c++
Conversant with Global Threat Updates and developments around Hacking/ Penetration Testing approaches
Conversant with all global standards for Information security