Description: Role : Offensive Security &

- Advanced Testing Specialist

Required Technical Skill SetOffensive Security Testing &

- Penetration Testing, Red Teaming &
- Threat Emulation (TTPs / MITRE Telecommunication&CK; / CBEST / TIBER-EU), AI / LLM Red Teaming &
- Adversarial Testing (MITRE ATLAS / OWASP Top 10 for LLMs), Purple Teaming &
- Collaborative Defense, Exploit Development &
- Tooling, Python / Bash / Go, Cloud &
- Infrastructure Offensive Testing (Azure / GCP / AWS / Active Directory)

Desired Experience Range: 7 – 12 Years (with deep, hands-on offensive security, red teaming, threat emulation, or advanced penetration testing experience)

Role Descriptions

Must-Have (Candidates must demonstrate depth in core offensive security and a combination/blend of the following specialisms)

- Red Teaming &
- Threat Emulation: Proven track record conducting full-scope, objective-driven red team operations and threat emulation mimicking sophisticated Advanced Persistent Threats (APTs) across enterprise hybrid environments using frameworks like MITRE Telecommunication&CK;, CBEST, and TIBER-EU.
- Offensive Security Testing &
- Penetration Testing: Advanced hands-on experience in complex penetration testing across web applications, REST/gRPC APIs, mobile apps, network infrastructure, container/Kubernetes environments, and cloud platforms (AWS, Azure, GCP).
- AI &
- GenAI Red Teaming: Hands-on experience performing adversarial testing and red teaming on Large Language Models (LLMs), Generative AI applications, and Agentic systems—testing for prompt injection,



jailbreaks, data extraction, context poisoning, tool-misuse, and inference bypass using MITRE ATLAS, OWASP Top 10 for LLMs, and tools such as PyRIT, Garak, PromptFoo, or custom harnesses.
- Purple Team Collaboration: Practical experience running Purple Team exercises in partnership with Cyber Security Operations (SOC), Threat Intelligence, and Detection Engineering to validate detection coverage, identify telemetry gaps, and improve defensive resilience (Mean Time to Detect / Respond).
- Adversarial Tooling &
- Exploitation: Proficiency with industry-standard offensive toolkits (Cobalt Strike, Sliver, Metasploit, Burp Suite Professional, BloodHound, Mimikatz, CrackMapExec) and custom exploit/payload development.
- Scripting &
- Automation: Strong proficiency in Python, Bash, PowerShell, or Go to automate attack workflows, build custom testing harnesses, and parse security telemetry.

Positive-to-Have

- Experience assessing multi-agent systems, Model Context Protocol (MCP), and tool execution boundaries.
- In-depth understanding of Active Directory / Azure AD attack paths (Kerberoasting, DCSync, AS-REP roasting, token manipulation, BloodHound graph analysis).
- Strong technical reporting skills, with the ability to articulate complex attack chains and actionable remediation advice to both technical engineers and senior executive stakeholders.
- Recognized industry certifications: OSCP, OSEP, OSWE, CREST (CCT INF/APP, CCSAS), GXPN, CRTO (Certified Red Team Operator), or equivalent.

📌 IND_Senior Security Engineer (Mumbai)
🏢 Artech Infosystems
📍 Mumbai