Lead Red Teamer

Reporting Structure

Reports to Chief Manager - VAPT

Education

University bachelors degree with specialisation in the field of computer Science/IT or Engineering Graduate/PG in CS/EXTC/IT Allied branches or B. Tech or BCA (Informatics Engineering Networking Cyber Security)

Experience/ Qualifications

• 5-7 years of Information Security background is essential.
• 3 Years in dedicate Red Teaming / Offensive Security role
• Preferably within the financial or banking sector and least 1 year in leading red team operations.

Industry

Information technology / Banking and Financial services / Cyber Security consulting firm

Skills & Responsibilities

• Hands-on experience in conducting covert security assessments including physical network application and social engineering scenarios.
• Proficiency in exploiting vulnerabilities bypassing security controls lateral movement privilege escalation and exfiltration techniques.
• Strong understanding of operating systems networks (Wired/ Wireless) and networking protocols Active directory cloud platforms phishing and web applications.
• Should have experience to performed Web Application API Infrastructure Mobile Application (Android & iOS) Security Assessments. expertise in assessing application based on OWASP methodology.
• Good practical understanding of MITRE ATT&CK tactics techniques and procedures (TTPs) used by advanced persistent threats (APTs).
• Analytical thinking creativity and adaptability in dynamic attack scenarios.
• Excellent communication skills to explain technical findings to non-technical audiences and work effectively within multi-disciplinary teams.
• Excellent written oral communication and presentation skills.
• Proficiency in command-and-control (C2) frameworks (e.g. Cobalt Strike Sliver Mythic) and script development (Python PowerShell Bash or Go).
• Development and deploy custom exploits and payloads that can be used to test specific system vulnerabilities.

Responsibilities

• Campaign Execution: Lead the end-to-end execution of stealthy red team operations including scoping reconnaissance exploitation and post-exploitation.
• Design operation plans mapped directly to real-world threat actors using frameworks like MITRE ATT&CK.
• Guide and mentor junior security engineers managing the operational roadmap for the penetration testing and red teaming program.
• Executive Reporting: Translate deep technical findings into actionable risk-based executive reports for stakeholders and C-suite leadership.

Certifications (any two)

• Certified Red Team Professional (CRTP) - Mandatory
• CRTO / CRTE
• Offensive Security Certified Professional (OSCP) - Mandatory
• Offensive Security Certified Expert (OSCE)
• GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
• CompTia Security
• CISA / CISM / CISSP / CEH / CRISC