Ethical Hacker

Red Teamer Specialist Web, API, Network & Active Directory

Experience: 35 Years | Domain: Security Consulting

Role Overview

Seeking a hands-on Penetration Tester / Red Teamer experienced in Web, API, Network, and Active Directory

security testing, with strong skills in exploitation, attack-path analysis, reporting, and client communication.

Key Responsibilities

• Conduct VAPT and Red Team engagements across Web, API, Network, Internal Infrastructure, and

Active Directory.

• Perform manual/automated testing covering OWASP Top 10, authentication, authorization,

injection, business logic, and data exposure.

• Execute Red Team operations, including reconnaissance, initial access, privilege escalation, lateral

movement, persistence, and attack-path analysis within authorized scope.

• Perform AD enumeration, privilege escalation, lateral movement, and attack-path analysis.

• Use tools including Burp Suite, Nmap, Nessus/Qualys, BloodHound, Impacket, Rubeus, Mimikatz,

Certipy, and Metasploit.

• Develop security automation/scripts using Python, PowerShell, or Bash.

• Deliver technical reports with risk, evidence, reproduction, business impact, and remediation

guidance.

• Present findings to technical/non-technical stakeholders and support remediation validation.

• Operate strictly within approved Rules of Engagement (RoE) and authorized scopes.

Must Have

• 3+ years of penetration testing/red teaming experience.

• Strong hands-on Web, API, Network & AD testing expertise.

• Proficiency with Burp Suite and security testing tools.

• Practical knowledge of AD enumeration, privilege escalation, lateral movement, and attack paths.

• Scripting skills in Python, PowerShell, or Bash.

• Strong reporting, communication, and client-facing skills.

• Experience working under formal RoE.

Tools & Frameworks

Burp Suite | Nmap | Nessus/Qualys | BloodHound | Impacket | Rubeus | Mimikatz | Certipy | Metasploit |

Python | PowerShell | Bash | Kali Linux

Frameworks: OWASP Top 10 | MITRE ATT&CK

Certifications

OSCP, CRTE, CRTO, or equivalent preferred.