Lead - RED Team Security Engineer

Requirements:

• 5-7 years of information security background is essential.
• 3 years in a dedicated Red Teaming/Offensive Security role.
• Preferably within the financial or banking sector and at least 1 year leading red team operations.
• Hands-on experience in conducting covert security assessments, including physical, network, application, and social engineering scenarios.
• Proficiency in exploiting vulnerabilities, bypassing security controls, lateral movement, privilege escalation, and exfiltration techniques.
• Strong understanding of operating systems, networks (wired/wireless) and networking protocols, Active Directory, cloud platforms, phishing, and web applications.
• Should have experience in performing web application, API, infrastructure, and mobile application (Android and iOS) security assessments. Expertise in assessing applications based on OWASP methodology.
• Good practical understanding of MITRE ATT& CK tactics, techniques, and procedures (TTPs) used by advanced persistent threats (APTs).
• Analytical thinking, creativity, and adaptability in dynamic attack scenarios.
• Excellent communication skills to explain technical findings to non-technical audiences and work effectively within multi-disciplinary teams.
• Excellent written and oral communication and presentation skills.
• Proficiency in command-and-control (C2) frameworks (e. g., Cobalt Strike, Sliver, and Mythic) and script development (Python, PowerShell, Bash, or Go).
• Development and deployment of custom exploits and payloads that can be used to test specific system vulnerabilities.