06 Oct
|
GK HR Consulting India Private
|
India
06 Oct
GK HR Consulting India Private
India
Position - Lead Red Teamer
Reporting Structure
Reports to Chief Manager - VAPT
Education
University bachelor’s degree with specialisation in the field of computer Science/IT or Engineering Graduate/PG in CS/EXTC/IT Allied branches or B. Tech or BCA (Informatics, Engineering, Networking, Cyber Security)
Experience/ Qualifications
- 5-7 years of Information Security background is essential.
- 3 Years in dedicate Red Teaming / Offensive Security role,
- Preferably within the financial or banking sector and least 1 year in leading red team operations.
Industry
Information technology / Banking and Financial services / Cyber Security consulting firm
Skills & Responsibilities
- Hands-on experience in conducting covert security assessments, including physical, network, application, and social engineering scenarios.
- Proficiency in exploiting vulnerabilities, bypassing security controls, lateral movement, privilege escalation, and exfiltration techniques.
- Robust understanding of operating systems, networks (Wired/ Wireless) and networking protocols, Active directory, cloud platforms, phishing and web applications.
- Should have experience to performed Web Application, API, Infrastructure, Mobile Application (Android & iOS) Security Assessments. expertise in assessing application based on OWASP methodology.
- Good practical understanding of MITRE ATT&CK; tactics, techniques, and procedures (TTPs) used by advanced persistent threats (APTs).
- Analytical thinking, creativity,
and adaptability in dynamic attack scenarios.
- Excellent communication skills to explain technical findings to non-technical audiences and work effectively within multi-disciplinary teams.
- Excellent written, oral communication and presentation skills.
- Proficiency in command-and-control (C2) frameworks (e.g., Cobalt Strike, Sliver, Mythic) and script development (Python, Power Shell, Bash, or Go).
- Development and deploy custom exploits and payloads that can be used to test specific system vulnerabilities.
Responsibilities
- Campaign Execution: Lead the end-to-end execution of stealthy red team operations, including scoping, reconnaissance, exploitation, and post-exploitation.
- Design operation plans mapped directly to real-world threat actors using frameworks like MITRE ATT&CK;.
- Guide and mentor junior security engineers, managing the operational roadmap for the penetration testing and red teaming program.
- Executive Reporting: Translate deep technical findings into actionable, risk-based executive reports for stakeholders and C-suite leadership.
Certifications (any two)
- Certified Red Team Professional (CRTP) - Mandatory
- CRTO / CRTE
- Offensive Security Certified Professional (OSCP) - Mandatory
- Offensive Security Certified Expert (OSCE)
- GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
- Comp Tia Security+
- CISA / CISM / CISSP / CEH / CRISC
📌 Lead Red Teamer (India)
🏢 GK HR Consulting India Private
📍 India