Join Deloitte's Cyber-D&R team as an Assistant Manager specializing in Red Teaming and Attack Surface Management. This role is crucial in helping organizations bolster their defenses against sophisticated cyber threats. Our team is dedicated to building resilient security postures, integrating cyber risk management into strategic planning for effective protection of information and technology assets. Explore the world of Cybersecurity with us.

As a Red Team Specialist, you will simulate advanced cyber-attacks to rigorously test and enhance client detection and response capabilities, particularly within the BFSI sector. Your responsibilities will include planning and executing comprehensive Red Team engagements that mimic real-world threat actor scenarios. This involves conducting assumed breach assessments, simulating initial access, and performing lateral movement and exfiltration exercises.

You will expertly leverage the MITRE ATT&CK framework to design detailed threat scenarios and map your findings. Exploiting misconfigurations and vulnerabilities across Active Directory, cloud environments, and enterprise infrastructure will be key. Furthermore, you will utilize and integrate CART/BAS tools like Cymulate or Pycus for automated security posture validation and collaborate with Blue Teams to assess detection, prevention, and response effectiveness post-engagement.

We are seeking candidates with a minimum of 5 years of hands-on experience in offensive security or red teaming roles. Proficiency in Red Team TTPs, including phishing, C2 infrastructure, evasion techniques, privilege escalation, and data exfiltration is essential. A deep understanding of Windows internals and advanced Active Directory attacks (Kerberoasting, Pass-the-Hash/Ticket, ACL abuse, DCShadow) is required. Familiarity with network protocols, cloud platforms, and endpoint security bypass techniques is also necessary.

Candidates should be proficient with attack simulation tools, custom scripting, and open-source frameworks such as Cobalt Strike, Metasploit, Empire, and Covenant. While experience in physical security assessments, badge cloning, RFID/NFC exploitation, and social engineering is preferred, a strong knowledge of MITRE ATT&CK and NIST frameworks is mandatory. The ability to document findings, map them to risk frameworks, and present effectively to both technical and executive stakeholders is vital. OSCP or CRTP certifications are mandatory. Prior experience in the BFSI sector and an understanding of financial institution compliance (RBI, SEBI, ISO 27001) are highly desirable. Excellent analytical, problem-solving, and communication skills are crucial for stakeholder management and effective debriefs, with the ability to perform under pressure and coordinate cross-functionally.