13 Sep
|
engineersmind
|
Pune
13 Sep
engineersmind
Pune
Principal Penetration Tester – Red Team Location: Pune
nExperience: 7 years
nRole Type: Red Team / Offensive Security
nKey Responsibilities
n
n
Conduct end-to-end Red Team engagements including reconnaissance, initial access, privilege escalation, lateral movement, persistence, and objective-based attacks.
n
Perform enterprise-level penetration testing and adversary simulation across network, application, cloud, and Active Directory settings.
n
Identify and exploit weaknesses in Active Directory and Azure Active Directory/Entra ID environments.
n
Assess Azure cloud infrastructure for security vulnerabilities, misconfigurations, identity and access-control weaknesses.
n
Perform network security assessments, including internal/external network penetration testing.
n
Conduct social engineering/phishing simulations where required as part of Red Team engagements.
n
Execute Red Team exercises against large and complex enterprise infrastructures.
n
Document attack paths, vulnerabilities, exploitation techniques, business impact, and remediation recommendations.
n
Prepare detailed technical reports and present findings to technical and client stakeholders.
n
nKey Requirements
n
n
7 years of overall experience in Cybersecurity / Offensive Security.
n
Robust hands-on Red Teaming experience, preferably in enterprise environments.
n
OSCP certification – Mandatory.
n
Robust experience with Active Directory and Azure AD/Entra ID attacks.
n
Hands-on experience with Azure Cloud Security / Cloud Penetration Testing.
n
Strong understanding of Networking concepts and network penetration testing.
n
Experience with lateral movement, privilege escalation, credential attacks, persistence and attack-path development.
n
Experience conducting end-to-end Red Team engagements, not only vulnerability assessment/VAPT.
n
Ability to work on large and complex client/enterprise infrastructures.
n
Strong technical reporting and client-facing communication skills.
n
nGood to Have
n
n
CRTO / CRTP certification
n
Experience with C2 frameworks such as Cobalt Strike, Sliver, etc.
n
Experience with AD attack tools and techniques such as BloodHound, Mimikatz, PowerView, Rubeus, etc.
n
Experience in social engineering / phishing simulations.
n
Cloud penetration testing experience across Azure/AWS.
n
Experience with adversary simulation and threat-informed Red Team operations.
n
n
📌 Principle Penetration Tester Red Team Expert Pune
🏢 engineersmind
📍 Pune