Associate Director, Principal Security (Gurugram)

Associate Director, Principal Security (Gurugram)

02 Oct
|
S&P Global
|
Gurugram

02 Oct

S&P Global

Gurugram

About the Role:

Grade Level (for internal use):
12The Role:
The Principal Security Engineer – Offensive Security is an internal adversarial security practitioner embedded within Enterprise Solutions (ES). The role is responsible for independently testing and validating the security posture of ES applications, data platforms, and supporting cloud infrastructure.

This is a hands-on offensive security role, not a compliance or governance function. The engineer plans and executes red team operations, penetration tests, and adversarial simulations that reflect the techniques, tactics, and procedures of realistic threat actors – across application code, APIs, CI/CD pipelines, AWS infrastructure, multi-tenant platform boundaries, and AI/agentic system components.

Working in close partnership with ES product engineering teams, the role provides an independent adversarial perspective on implemented controls and remediations. Findings feed directly into the continuous improvement of security practices across ES engineering and inform risk decisions made by technology and business leadership.




Success is measured by the quality and realism of engagements, the reduction of exploitable risk in production systems, and the degree to which findings drive durable security improvement – not by volume of findings or compliance artefacts.

Key Responsibilities

Red Team Operations & Penetration Testing
• Plan and execute red team engagements and penetration tests against web applications, APIs, internal services, and AWS cloud infrastructure, scoped and executed with transparent rules of engagement.
• Simulate realistic attacker TTPs aligned with threat intelligence and frameworks such as MITRE ATT&CK; (Enterprise and Cloud), tailored to the organizational threat model.
• Conduct full-scope assessments covering initial access, lateral movement, privilege escalation, persistence, and data exfiltration across application and cloud environments.
• Perform cloud-specific attack path analysis in

📌 Associate Director, Principal Security (Gurugram)
🏢 S&P Global
📍 Gurugram

Reply to this offer

Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.

Subscribe to this job alert:

Get the latest job offers by email for: associate director, principal security (gurugram) / gurugram