Join Deloitte's Cyber-D&R team as a Deputy Manager specializing in Red Teaming and Attack Surface Management. This role is crucial for protecting organizations against cyber threats, particularly within the BFSI sector. You will be instrumental in enhancing client detection and response capabilities through simulated sophisticated cyber-attacks.

Deloitte empowers organizations to build resilience against cyber threats. We focus on integrating cybersecurity into strategic development, ensuring effective management of information and technology risks. Discover more about our Cybersecurity offerings.

Plan and execute comprehensive Red Team engagements, simulating realistic threat actor scenarios including external, internal, and physical attacks. Conduct assumed breach assessments, initial access simulations, lateral movement, and data exfiltration exercises.

Leverage the MITRE ATT&CK framework for designing threat scenarios and mapping findings. Exploit misconfigurations and vulnerabilities across Active Directory, cloud environments, and enterprise infrastructure. Utilize and integrate CART/BAS tools for automating security posture validation.

Collaborate with Blue Teams to assess and enhance detection, prevention, and response capabilities. Develop detailed reports with actionable remediation recommendations and conduct threat emulation tailored to industry-specific APT groups relevant to the BFSI sector.

Stay abreast of emerging threats, attack techniques, and countermeasures. Support security awareness programs, purple teaming, and tabletop exercises for internal and client-facing audiences.

This role requires a seasoned Red Team Specialist with a minimum of 5 years of hands-on experience in offensive security. A strong command of Red Team TTPs, including phishing, C2 infrastructure, evasion techniques, privilege escalation, and data exfiltration is essential.

In-depth knowledge of Windows internals and Active Directory attack vectors is expected. Solid understanding of network protocols, cloud platforms, and endpoint security bypass techniques is crucial. Familiarity with attack simulation tools, custom scripting, and frameworks like Cobalt Strike, Metasploit, Empire, or Covenant is required.

Experience in physical security assessments, RFID/NFC exploitation, and social engineering is preferred. A strong grasp of MITRE ATT&CK and NIST frameworks is necessary. The ability to document findings, map them to risk frameworks, and present to diverse stakeholders is key.

Relevant offensive security certifications such as OSCP or CRTP are highly desirable. Prior experience in BFSI sector engagements and an understanding of financial institution regulatory requirements (e.g., RBI, SEBI, ISO 27001) are beneficial. Excellent analytical, problem-solving, and communication skills are vital for success in this role. The position demands the ability to thrive in high-pressure situations and coordinate effectively with cross-functional teams.