Offensive Security & Advanced Testing Lead

We are looking for an experienced Offensive Security professional to lead advanced security assessments, adversary emulation exercises, red team operations, AI security testing, and purple team engagements. The role will help validate organizational resilience against modern cyber threats across IT, cloud, OT/IoT, and emerging AI systems.

The core responsibilities for the job include the following:

Red Team Operations:

• Plan and execute sophisticated red team engagements.
• Simulate real-world adversary campaigns and attack chains.
• Assess effectiveness of defensive controls, monitoring, and response capabilities.
• Develop attack scenarios aligned with industry threat actors.

Offensive Security Testing:

• Conduct penetration testing of applications, networks, cloud platforms, APIs, and infrastructure.
• Perform vulnerability assessments and exploit validation.
• Assess identity, access management, and cloud security configurations.
• Generate actionable security remediation recommendations.

Threat Emulation:

• Design and execute threat emulation exercises based on threat intelligence.
• Map activities to MITRE ATT& CK and adversary TTPs.
• Validate security controls against advanced persistent threat (APT) behaviors.
• Measure organizational detection and response effectiveness.

AI Security Testing:

• Perform security assessments of AI/ML systems and GenAI applications.
• Evaluate LLM security risks, including prompt injection, jailbreaks, model manipulation, data leakage, and agent abuse.
• Conduct adversarial AI testing and model robustness assessments.
• Develop AI security validation methodologies and testing frameworks.

Purple Team Engagements:

• Collaborate with SOC, Detection Engineering, and Incident Response teams.
• Validate detection use cases through controlled attack simulations.
• Improve threat visibility, response effectiveness, and detection coverage.
• Guide security control optimization.

Requirements:

• Advanced penetration testing and exploit development.
• Red Team and adversary simulation expertise.
• Threat emulation using the MITRE ATT& CK framework.
• Cloud security testing (Azure, AWS, GCP).
• Application security and API testing.
• AI/ML and GenAI security testing experience.
• Adversary emulation tooling (Cobalt Strike, Mythic, Caldera, Atomic Red Team, etc. ).
• Security scripting and automation (Python, PowerShell, Bash).
• Preferred Certifications: OSCP/OSEP, CRTO (Certified Red Team Operator), OSCE3, GIAC GPEN/GXPN, CARTP/CARTE, CISSP, SANS SEC699 (AI Security).