03 Oct
|
Unthinkable Solutions
|
Gurugram
03 Oct
Unthinkable Solutions
Gurugram
Red Teamer Specialist Web, API, Network & Active Directory
Experience: 35 Years | Domain: Security Consulting
Role Overview
Seeking a hands-on Penetration Tester / Red Teamer experienced in Web, API, Network, and Active Directory security testing, with solid skills in exploitation, attack-path analysis, reporting, and client communication.
Key Responsibilities
Conduct VAPT and Red Team engagements across Web, API, Network, Internal Infrastructure, and
Active Directory.
Perform manual/automated testing covering OWASP Top 10, authentication, authorization,
injection, business logic, and data exposure.
Execute Red Team operations, including reconnaissance, initial access, privilege escalation, lateral movement, persistence, and attack-path analysis within authorized scope.
Perform AD enumeration, privilege escalation, lateral movement, and attack-path analysis.
Use tools including Burp Suite, Nmap, Nessus/Qualys, BloodHound, Impacket, Rubeus, Mimikatz,
Certipy, and Metasploit.
Develop security automation/scripts using Python, PowerShell, or Bash.
Deliver technical reports with risk, evidence,
reproduction, business impact, and remediation guidance.
Present findings to technical/non-technical stakeholders and support remediation validation.
Operate strictly within approved Rules of Engagement (RoE) and authorized scopes.
Must Have
3+ years of penetration testing/red teaming experience.
Solid hands-on Web, API, Network & AD testing expertise.
Proficiency with Burp Suite and security testing tools.
Practical knowledge of AD enumeration, privilege escalation, lateral movement, and attack paths.
Scripting skills in Python, PowerShell, or Bash.
Robust reporting, communication, and client-facing skills.
Experience working under formal RoE.
Tools & Frameworks
Burp Suite | Nmap | Nessus/Qualys | BloodHound | Impacket | Rubeus | Mimikatz | Certipy | Metasploit |
Python | PowerShell | Bash | Kali Linux
Frameworks: OWASP Top 10 | MITRE ATT&CK;
Certifications
OSCP, CRTE, CRTO, or equivalent preferred.
📌 Ethical Hacker Gurugram
🏢 Unthinkable Solutions
📍 Gurugram