T&T I Cyber-D&R I Senior Analyst I Red Teaming Attack Surface Management | Mumbai

Deloitte

1+ yrs Mumbai Full Time Work from office
Deloitte logo
Posted : yesterday
Actively hiring

Job description

Join our Cybersecurity team as a Senior Analyst specializing in Red Teaming and Attack Surface Management. We are looking for a skilled professional to simulate advanced cyber-attacks, helping organizations in the BFSI sector enhance their detection and response capabilities. This role offers a dynamic environment to leverage cutting-edge offensive security techniques and contribute to robust cyber defense strategies.

Responsibilities

Plan and execute sophisticated Red Team engagements, simulating realistic threat actor scenarios across external, internal, and physical vectors. Conduct assumed breach assessments, initial access simulations, lateral movement, and data exfiltration exercises. Utilize the MITRE ATT&CK framework to design threat scenarios and meticulously map findings. Exploit vulnerabilities in Active Directory, cloud environments, and enterprise infrastructure. Collaborate with Blue Teams to measure and improve detection, prevention, and response capabilities. Develop comprehensive reports with actionable remediation recommendations and conduct threat emulation based on industry-specific APT groups.

Qualifications

A minimum of 1 year of hands-on experience in offensive security or red teaming is required. Proficiency in Red Team TTPs, including phishing, C2 infrastructure, evasion, privilege escalation, and data exfiltration, is essential. A deep understanding of Windows internals, Active Directory attacks, network protocols, cloud platforms, and endpoint security bypass techniques is crucial. Familiarity with attack simulation tools like Cobalt Strike, Metasploit, or Covenant is expected. Experience with physical security assessments, RFID/NFC exploitation, and social engineering is preferred. A strong grasp of MITRE ATT&CK and NIST frameworks, along with the ability to document findings and present to stakeholders, is vital. OSCP, CRTP, or similar offensive security certifications are a plus. Prior experience in the BFSI sector and understanding of financial institution regulatory requirements are highly valued. Excellent analytical, problem-solving, and communication skills are necessary to thrive in high-pressure environments and coordinate with cross-functional teams. Educational qualifications include a B.Tech, BCA, B.E, or any equivalent degree.

Essential Skills

Offensive SecurityRed TeamingAttack Surface ManagementPhishingC2 InfrastructureEvasion TechniquesPrivilege EscalationData ExfiltrationWindows InternalsActive Directory AttacksNetwork ProtocolsCloud SecurityEndpoint SecurityCobalt StrikeMetasploitEmpireCovenantMITRE ATT&CK FrameworkNIST FrameworkReportingThreat EmulationBFSI Sector

Good to Have

Physical Security AssessmentsBadge CloningRFID ExploitationNFC ExploitationSocial EngineeringCymulatePycus

Highlights

  • Actively hiring

More Details

RoleT&T I Cyber-D&R I Senior Analyst I Red Teaming Attack Surface Management | Mumbai
IndustryFinancial Services, Information Technology & Services, Cybersecurity
DepartmentInformation Security Analyst, Cybersecurity Analyst, Red Team Specialist, Penetration Tester
Employment TypeFull Time, Work from office

About the Company

Deloitte logo

Deloitte

Financial Services

T&T I Cyber-D&R I Senior Analyst I Red Teaming Attack Surface Management | Mumbai at Deloitte | SkillMX | SkillMX