Join Deloitte's distinguished cybersecurity team as a Red Team Specialist. You will play a pivotal role in simulating advanced cyber-attacks, focusing on the BFSI sector. This position offers the chance to significantly enhance client detection and response capabilities through sophisticated offensive security techniques.

This role involves testing and strengthening defenses by emulating real-world threat actors. You will contribute to a secure and resilient digital landscape for our clients, embedding cyber risk management into their strategic development.

Lead Red Team engagements, mimicking realistic threat scenarios across external, internal, and physical domains. Conduct assumed breach assessments, initial access simulations, and sophisticated lateral movement exercises.

Utilize the MITRE ATT&CK framework to craft threat scenarios and map findings. Exploit vulnerabilities in Active Directory, cloud environments, and enterprise infrastructure. Collaborate with Blue Teams to evaluate and improve detection and response mechanisms. Develop comprehensive reports with actionable remediation recommendations and conduct threat emulation tailored to BFSI sector APT groups.

A minimum of 5 years of hands-on experience in offensive security or red teaming is essential. Proficiency in Red Team TTPs, including phishing, C2 infrastructure, evasion, privilege escalation, and data exfiltration, is required. Deep understanding of Windows internals and Active Directory attack vectors is crucial.

Solid grasp of network protocols, cloud platforms, and endpoint security bypass techniques. Familiarity with attack simulation tools, custom scripting, and open-source frameworks like Cobalt Strike or Metasploit is expected. Experience with physical security assessments and social engineering is a significant plus. Strong knowledge of MITRE ATT&CK and NIST frameworks is necessary. OSCP, CRTP, or equivalent offensive security certifications are highly valued. Prior experience in BFSI sector engagements and understanding of relevant compliance requirements are preferred.