Role & responsibilities

- Conduct proactive threat hunting and Purple Team exercises to identify advanced threats and improve detection capabilities aligned to MITRE ATT&CK;

- Plan and execute Red Team engagements to simulate real-world attack scenarios and identify exploitable gaps across infrastructure, applications, and identity layers

- Design and manage Breach & Attack Simulation (BAS) programs to continuously validate effectiveness of security controls and detection mechanisms

- Lead and facilitate Incident Response (IR) drills and tabletop exercises to test organizational readiness, response processes, and stakeholder coordination

- Provide actionable insights, reports, and recommendations to enhance cyber resilience, detection coverage, and response maturity across the enterprise

Preferred candidate profile

- 10-15 years in Cybersecurity

- Minimum 3-5 years in Red Team / Threat Hunting / Simulation roles Mandatory

- Experience in enterprise-scale environments (preferably global operations)

- Good hands-on knowledge on Cyber Threat Intelligence (CTI), potential threats and vulnerabilities - Mandatory

- Experience in developing scripts and programing for Red Teaming,



Threat Hunting and Breach and Attack Simulations - Mandatory

- Solid Technical Knowledge on Operating systems like Microsoft, Windows, Linux, Mac machines etc.,

- Experience in Reconnaissance techniques, System hacking phases and attack techniques like Mitre Att&ck; Framework & techniques - Mandatory

- Technical skills - OWASP top 10 vulnerabilities, Network Protocols etc.,

- Hands on experience in using security tools like Burp Suite, Metasploit, Nmap, Nessus, Qualys, OWASP ZAP, - Mandatory

- Experience in Threat hunting, creation and testing YARA rules and performing proactive retro threat hunting

- Hands on Experience in performing breach and attack simulations / validations

- Strong knowledge on network tools, perimeter gateways, intrusion detection systems, firewalls, web application firewalls, cloud computing and cloud workloads, Privilege Access & Identity

- Management, EDR tools, DNS protections etc.,

- Ability to communicate security risks clearly to stakeholders - Verbal and written communication.

📌 Cyber Defense Specialist (Bengaluru)
🏢 Larsen u0026 Toubro (Lu0026T)
📍 Bengaluru