Devsecops and Offensive security domain - Penetration testing

Job highlights

• Proficient with tools like Cobalt Strike,Burp Suite,Nmap
• . Devsecops and Offensive security domain - Penetration testing . hands-on experience in penetration testing,red teaming,vulnerability assessment,and security research

Devsecops and Offensive security domain - Penetration testing

• hands-on experience in penetration testing, red teaming, vulnerability assessment, and security research. You will drive offensive security strategies, lead a team of security professionals, and collaborate closely with other security and engineering teams to identify, exploit, and remediate security vulnerabilities across our enterprise environment.

Key Responsibilities:

• Lead and manage the offensive security team, providing mentorship, guidance, and technical expertise.
• Plan and execute advanced penetration tests, red team engagements, and vulnerability assessments on internal and external systems, networks, and applications.
• Develop and implement offensive security methodologies, tools, and frameworks to simulate real-world attack scenarios.
• Collaborate with security operations, application security, and infrastructure teams to improve the overall security posture.
• Drive continuous improvement of security testing processes and reporting standards.
• Research and stay current with the latest offensive security trends, tools, techniques, and threat actor tactics.
• Prepare detailed technical reports and present findings to technical and non-technical stakeholders, including senior leadership.
• Work with incident response teams to simulate attack scenarios and assist in threat hunting activities.
• Lead the development and delivery of offensive security training and awareness programs within the organization.
• Ensure compliance with security policies, standards, and regulatory requirements related to offensive security testing.

Band B3 or C1

Location Bangalore Customer location

Primary Skill Set

1. Advanced Penetration Testing Red Teaming
   Expertise in network, web, cloud, and application testing
   Familiarity with frameworks like MITRE ATTCK
2. Offensive Tooling Scripting
   Proficient with tools like Cobalt Strike, Burp Suite, Nmap
   Strong scripting (Python, Bash, PowerShell)
3. Exploit Development
   Custom exploit creation and vulnerability research
   Understanding of common attack vectors (e.g., RCE, privilege escalation)
4. Leadership Engagement Management
   Leading red team operations
   Risk reporting and stakeholder communication
5. Adversary Emulation
   Designing realistic attack simulations
   Threat actor behaviour modelling

Secondary Skill Set

1. Defensive Security Awareness
   Understanding of blue team operations and SIEM/EDR tools
2. Cloud Security
   Offensive techniques in AWS, Azure, GCP environments
3. Compliance Knowledge
   Familiarity with NIST, PCI-DSS, ISO 27001, etc.
4. Soft Skills
   Clear communication, reporting, and stakeholder engagement
5. Relevant Certifications
   OSCP, CEH