Cyber Defense Specialist

Role & responsibilities

• Conduct proactive threat hunting and Purple Team exercises to identify advanced threats and improve detection capabilities aligned to MITRE ATT&CK
• Plan and execute Red Team engagements to simulate real-world attack scenarios and identify exploitable gaps across infrastructure, applications, and identity layers
• Design and manage Breach & Attack Simulation (BAS) programs to continuously validate effectiveness of security controls and detection mechanisms
• Lead and facilitate Incident Response (IR) drills and tabletop exercises to test organizational readiness, response processes, and stakeholder coordination
• Provide actionable insights, reports, and recommendations to enhance cyber resilience, detection coverage, and response maturity across the enterprise

Preferred candidate profile

• 10-15 years in Cybersecurity
• Minimum 3-5 years in Red Team / Threat Hunting / Simulation roles Mandatory
• Experience in enterprise-scale environments (preferably global operations)
• Good hands-on knowledge on Cyber Threat Intelligence (CTI), potential threats and vulnerabilities - Mandatory
• Experience in developing scripts and programing for Red Teaming, Threat Hunting and Breach and Attack Simulations - Mandatory
• Strong Technical Knowledge on Operating systems like Microsoft, Windows, Linux, Mac machines etc.,
• Experience in Reconnaissance techniques, System hacking phases and attack techniques like Mitre Att&ck Framework & techniques - Mandatory
• Technical skills - OWASP top 10 vulnerabilities, Network Protocols etc.,
• Hands on experience in using security tools like Burp Suite, Metasploit, Nmap, Nessus, Qualys, OWASP ZAP, - Mandatory
• Experience in Threat hunting, creation and testing YARA rules and performing proactive retro threat hunting
• Hands on Experience in performing breach and attack simulations / validations
• Strong knowledge on network tools, perimeter gateways, intrusion detection systems, firewalls, web application firewalls, cloud computing and cloud workloads, Privilege Access & Identity
• Management, EDR tools, DNS protections etc.,
• Ability to communicate security risks clearly to stakeholders - Verbal and written communication.