9 - 12 Years

1 Opening

Bengaluru

Role description : Role Overview

Grant Thornton is seeking experienced and highly skilled Offensive Security and Compromise Assessment Manager to lead proactive security testing and compromise assessment initiatives across our global enterprise environment. This leadership role is focused on identifying security weaknesses before adversaries can exploit them and determining whether any active compromise already exists within the organization.

You will lead penetration testing, red team exercises, and compromise assessments designed to simulate real-world attack scenarios. In parallel, you will direct setting-wide threat hunts and forensic analysis to identify indicators of compromise (IOCs), unauthorized access, persistence mechanisms, and attacker activity.

This is a hands-on leadership role requiring strong technical expertise in offensive security, threat hunting, forensic investigation, and compromise assessment. You will work closely with Security Operations, Incident Response, Security Engineering, and Leadership teams to validate defenses, identify gaps, and ensure rapid remediation of vulnerabilities and threats.

Your mission is to proactively find and eliminate security risks, validate detection capabilities, and ensure attackers have no place to hide within the organization.

Skills : Skills : Primary Responsibilities

Offensive Security Leadership (Proactive Testing)

Design and execute red team exercises simulating real-world adversary tactics, techniques, and procedures (TTPs).

Test detection and response capabilities of existing security tools and SOC processes.

Develop attack simulations to evaluate detection gaps and improve defensive posture.

Work closely with engineering and security teams to remediate identified vulnerabilities.





Provide actionable remediation guidance to improve enterprise security posture.

Compromise Assessment & Threat Hunting

Lead enterprise-wide compromise assessments to determine if unauthorized access or attacker persistence exists.

Analyze logs, endpoint telemetry, network traffic, authentication events, and system activity for indicators of compromise.

Identify attacker persistence mechanisms, privilege escalation, lateral movement, and command-and-control activity.

Investigate suspicious behavior across endpoints, identity systems, and cloud environments.

Validate security s and determine whether malicious activity has occurred.

Incident Investigation Support (When required)

Support Incident Response teams during active security incidents.

Assist in determining attack scope, root cause, attacker methods, and impact.

Develop incident investigation reports with clear technical findings and executive summaries.

Provide recommendations to strengthen security controls and prevent recurrence.

Leadership & Program Management

Lead and mentor offensive security and compromise assessment team members.

Develop offensive security testing strategies aligned with business priorities.

Establish compromise assessment methodologies, procedures, and best practices.

Prioritize offensive testing based on business risk and threat landscape.

Provide regular updates to leadership on vulnerabilities,



compromise risks, and remediation progress.

Translate technical findings into clear business impact and risk language.

Security Improvement & Control Validation

Validate effectiveness of endpoint detection tools such as CrowdStrike EDR/MDR.

Evaluate identity security controls including MFA, authentication systems, and privileged access.

Validate network security controls including firewalls, segmentation, and access controls.

Identify detection gaps and recommend improvements.

Other details : Required Qualifications

Experience

Manager : Minimum 9+ years of cybersecurity experience

Minimum 5+ years in offensive security, penetration testing, red teaming, or compromise assessment

Experience must include hands-on: Penetration testing and red team operations.

Threat hunting and compromise assessment.

Incident investigation and forensic analysis.

Technical Skills

Strong hands-on experience with: Offensive Security Tools

Metasploit, Cobalt Strike, BloodHound, Nmap, Burp Suite, Mimikatz

Adversary‑emulation and attack‑simulation tools

Security Platforms

CrowdStrike EDR/MDR

SIEM platforms

Identity platforms (Active Directory, Azure AD)

Network security monitoring tools

Technical Knowledge

MITRE ATT&CK; framework

Threat actor tactics and attack techniques

Windows, Linux, and Cloud environments

Authentication, identity, and privilege escalation techniques

Persistence mechanisms and attacker evasion techniques

Certifications (Required or Strongly Preferred)

One or more of the following: OSCP - Offensive Security Certified Professional

OSEP - Offensive Security Experienced Penetration Tester

OSCE / OSCE3 - Offensive Security Certified Expe

📌 Offensive Security / Compromise Assessment - Manager (Bengaluru)
🏢 Grant Thornton INDUS
📍 Bengaluru