We are seeking a highly skilled Offensive Security skilled with expertise in Red Team Operations, Application Security Testing, API Security Assessment, Mobile Application Penetration Testing, and Dynamic Application Security Testing (DAST). The role involves simulating real-world cyberattacks, identifying security weaknesses across applications and infrastructure, and providing actionable remediation guidance to development and security teams.
Responsibilities
• Conduct adversary emulation exercises and Red Team engagements.
• Execute attack simulations against enterprise settings, Active Directory, cloud infrastructure, and critical business applications.
• Perform reconnaissance, initial access, privilege escalation, persistence, lateral movement, and data exfiltration simulations.
• Assess effectiveness of SOC, SIEM, EDR, XDR, MDR, and Incident Response capabilities.
• Develop custom attack scenarios based on MITRE ATT&CK; framework.
• Deliver executive and technical reports with attack paths, impact analysis, and remediation recommendations.
• Perform manual and automated security assessments of web applications.
• Identify and exploit vulnerabilities including:
• SQL Injection
• Cross-Site Scripting (XSS)
• CSRF
• SSRF
• Broken Authentication
• Authorization Bypass
• Business Logic Flaws
• File Upload Vulnerabilities
• Perform REST, SOAP, GraphQL, and Microservices API security assessments.
• Evaluate APIs against OWASP API Security Top 10.
• Identify vulnerabilities such as:
• Broken Object Level Authorization (BOLA)
• Conduct Android and iOS application security assessments.
• Perform static and energetic analysis of mobile applications.
• Assess:
• Local Data Storage Security
• Configure and execute DAST scans across web applications and APIs.
• Validate and triage findings.
• Integrate DAST into CI/CD and DevSecOps pipelines.
• Assist development teams in remediation and secure coding practices.
Qualifications
Must-Have Sk
📌 Service Operations Specialist Noida (India)
🏢 NOKIA
📍 India