T&T I Cyber-D&R I Manager I Red Teaming Attack Surface Management | Mumbai (Mumbai, IN)
Deloitte
Deloitte
Join our elite Red Teaming and Attack Surface Management team as a Manager, where you'll be instrumental in simulating sophisticated cyber-attacks. This role focuses on bolstering the detection and response capabilities of organizations, particularly within the critical BFSI sector, ensuring their security posture is resilient against evolving threats. You will be at the forefront of safeguarding valuable assets and enabling new opportunities through robust cyber risk management.
As a Manager in Red Teaming, you will spearhead the planning and execution of comprehensive attack simulations, covering external, internal, and physical vectors. Your responsibilities include conducting assumed breach assessments, mastering lateral movement, and executing data exfiltration exercises. You'll expertly exploit vulnerabilities in Active Directory, cloud environments, and enterprise infrastructure, leveraging the MITRE ATT&CK framework to design threat scenarios and report findings. Collaborating with Blue Teams, you will measure and enhance detection, prevention, and response capabilities, while developing actionable remediation recommendations and staying ahead of emerging threats.
We are seeking an accomplished Red Team Specialist with a minimum of 7 years of hands-on experience in offensive security. A deep understanding of Red Team TTPs, including phishing, C2 infrastructure, evasion, privilege escalation, and data exfiltration, is essential. Proficiency in Windows internals and advanced Active Directory attack techniques is a must. Familiarity with cloud platforms, endpoint security bypass, and attack simulation tools like Cobalt Strike and Metasploit is expected. Experience in the BFSI sector and knowledge of relevant regulatory requirements are highly valued. A Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field, along with offensive security certifications such as OSCP or CRTP, is required.
Deloitte
Information Technology & Services