Red Team Consultant
SISA Information Security Pvt · Mumbai · onsite · Posted today
Not disclosed3–7 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Job Description – Red Team Consultant / Senior Consultant
Role Overview
We are looking for passionate and highly skilled Red Team professionals to join our offensive security team. The role involves simulating advanced adversary techniques to assess, challenge, and strengthen the security posture of our clients. You will plan, execute, and report on Red Team engagements covering network, application, cloud, social engineering, and physical vectors.
Key Responsibilities
Conduct full-scope Red Team engagements simulating real-world adversaries.
Perform adversary emulation using techniques aligned with MITRE ATT&CK.
Identify, exploit, and escalate vulnerabilities across applications, infrastructure, and cloud environments.
Develop and execute phishing/social engineering campaigns.
Design and carry out lateral movement, privilege escalation, persistence, and data exfiltration scenarios.
Research and develop custom tools, scripts, and payloads to support operations.
Collaborate with the Blue Team/Purple Team for detection engineering and defensive improvements.
Document and present findings in executive and technical reports with clear risk/business impact.
Stay updated with the latest TTPs, APT campaigns, and security research.
Required Skills & Experience
3–7 years of experience in penetration testing / offensive security / Red Teaming.
Strong knowledge of network protocols, Active Directory attacks, and cloud security (AWS, Azure, GCP).
Proficiency in exploit development, scripting (Python, PowerShell, Bash), and tool customization.
Hands-on with tools like Cobalt Strike, Metasploit, Empire, Covenant, Sliver, Veil, Mimikatz, BloodHound, etc.
Experience with Evasion techniques (AV/EDR bypass, obfuscation, payload delivery).
Familiarity with forensic artefacts and ability to simulate stealthy attacker behavior.
Excellent problem-solving skills and an attacker's mindset.
Good communication skills for both technical and non-technical audiences.
Preferred / Nice-to-Have
Relevant certifications: OSCP, CRTO, OSEP, OSCE, CRTP, CRTE, CISSP (offensive track).
Experience in physical Red Team assessments.
Experience with custom malware development or adversary simulation frameworks.
Contribution to open-source tools, security research, or publications.
Role Overview
We are looking for passionate and highly skilled Red Team professionals to join our offensive security team. The role involves simulating advanced adversary techniques to assess, challenge, and strengthen the security posture of our clients. You will plan, execute, and report on Red Team engagements covering network, application, cloud, social engineering, and physical vectors.
Key Responsibilities
Conduct full-scope Red Team engagements simulating real-world adversaries.
Perform adversary emulation using techniques aligned with MITRE ATT&CK.
Identify, exploit, and escalate vulnerabilities across applications, infrastructure, and cloud environments.
Develop and execute phishing/social engineering campaigns.
Design and carry out lateral movement, privilege escalation, persistence, and data exfiltration scenarios.
Research and develop custom tools, scripts, and payloads to support operations.
Collaborate with the Blue Team/Purple Team for detection engineering and defensive improvements.
Document and present findings in executive and technical reports with clear risk/business impact.
Stay updated with the latest TTPs, APT campaigns, and security research.
Required Skills & Experience
3–7 years of experience in penetration testing / offensive security / Red Teaming.
Strong knowledge of network protocols, Active Directory attacks, and cloud security (AWS, Azure, GCP).
Proficiency in exploit development, scripting (Python, PowerShell, Bash), and tool customization.
Hands-on with tools like Cobalt Strike, Metasploit, Empire, Covenant, Sliver, Veil, Mimikatz, BloodHound, etc.
Experience with Evasion techniques (AV/EDR bypass, obfuscation, payload delivery).
Familiarity with forensic artefacts and ability to simulate stealthy attacker behavior.
Excellent problem-solving skills and an attacker's mindset.
Good communication skills for both technical and non-technical audiences.
Preferred / Nice-to-Have
Relevant certifications: OSCP, CRTO, OSEP, OSCE, CRTP, CRTE, CISSP (offensive track).
Experience in physical Red Team assessments.
Experience with custom malware development or adversary simulation frameworks.
Contribution to open-source tools, security research, or publications.
Sourced from foundit
Skills
Evasion TechniquesScriptingBashAV EDR bypassforensic artefactspayload deliverystealthy attacker behaviorVeilgoogle cloud platformamazon web servicesnetwork protocolsCovenantRed TeamingMetasploitCobalt Striketool customizationSliverBloodhoundobfuscationPythonActive Directory AttacksExploit developmentCloud SecurityPenetration TestingPowershellMicrosoft AzureEmpireMimikatz
About SISA Information Security
SISA Information Security Pvt
IT Services & Consulting
400
employees
2003
23 years old
Bengaluru, Karnataka
India
₹9.2L PA avg
Avg at SISA Information Security
About
SISA;s Forensics-driven Cybersecurity Framework equips you with right tools and expertise to improve security posture, business growth with optimized cost.
Industries
IT Services & Consulting
Employee ratings
10 reviews
3.0/ 5
Culture
3.0
Career growth
2.3
Work-life
2.7
Employees rate it well for
Job Security31Skill Development30
Find them on