Join our dynamic cybersecurity team as an Assistant Manager specializing in Red Teaming and Attack Surface Management. You will play a crucial role in simulating realistic threat actor scenarios to help organizations prevent cyberattacks and protect their valuable assets. This is an opportunity to be at the forefront of cyber risk management, ensuring resilience and enabling new business opportunities through robust security strategies.

Plan and execute Red Team engagements, simulating advanced threat actor tactics across external, internal, and physical domains. Conduct thorough assumed breach assessments, initial access simulations, lateral movement exercises, and data exfiltration drills. Utilize the MITRE ATT&CK framework to design sophisticated threat scenarios and effectively map findings. Exploit vulnerabilities and misconfigurations in Active Directory, cloud environments, and enterprise infrastructure. Integrate CART/BAS tools like Cymulate or Pycus for automated security posture validation. Collaborate with Blue Teams to assess detection, prevention, and response capabilities. Develop detailed reports with actionable remediation recommendations and conduct threat emulation tailored to the BFSI sector's specific APT groups. Stay abreast of the latest threats, techniques, and countermeasures, while supporting security awareness and tabletop exercises.

A minimum of 3 years of hands-on experience in offensive security or red teaming roles is essential. Proficiency in Red Team TTPs, including phishing, command and control infrastructure, evasion techniques, privilege escalation, and data exfiltration, is required. A deep understanding of Windows internals and Active Directory attacks (e.g., Kerberoasting, Pass-the-Hash/Ticket, ACL abuse) is crucial. Solid knowledge of network protocols, cloud platforms, and endpoint security bypass techniques is necessary. Familiarity with attack simulation tools, custom scripting, and open-source frameworks like Cobalt Strike, Metasploit, Empire, or Covenant is expected. Experience with physical security assessments, RFID/NFC exploitation, and social engineering is preferred. Strong knowledge of MITRE ATT&CK and NIST frameworks is vital. The ability to document findings, map them to risk frameworks, and present to both technical and executive stakeholders is key. A Bachelor's or Master's degree in Computer Science, Information Security, or a related field is required. Offensive security certifications such as OSCP, CRTP, CRTA, or CRTO are preferred.