16 Aug
|
S&P Global
|
India
This job is with S&P; Global, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ business community. Please do not contact the recruiter directly. About the Role: Grade Level (for internal use): 12 The Role: The Principal Security Engineer - Offensive Security is an internal adversarial security practitioner embedded within Enterprise Solutions (ES). The role is responsible for independently testing and validating the security posture of ES applications, data platforms, and supporting cloud infrastructure. This is a hands-on offensive security role, not a compliance or governance function. The engineer plans and executes red team operations, penetration tests, and adversarial simulations that reflect the techniques, tactics, and procedures of realistic threat actors - across application code, APIs, CI/CD pipelines, AWS infrastructure, multi-tenant platform boundaries, and AI/agentic system components. Working in close partnership with ES product engineering teams,
the role provides an independent adversarial perspective on implemented controls and remediations. Findings feed directly into the continuous improvement of security practices across ES engineering and inform risk decisions made by technology and business leadership. Success is measured by the quality and realism of engagements, the reduction of exploitable risk in production systems, and the degree to which findings drive durable security improvement - not by volume of findings or compliance artefacts. Key Responsibilities Red Team Operations & Penetration Testing Plan and execute red team engagements and penetration tests against web applications, APIs, internal services, and AWS cloud infrastructure, scoped and executed with transparent rules of engagement. Simulate realistic attacker TTPs aligned with threat intelligence and frameworks such as MITRE ATT&CK; (Enterprise and Cloud), tailored to the organizational threat model. Conduct full-scope assessments covering initial
📌 Associate Director, Principal Security (India)
🏢 S&P Global
📍 India