Job Description

Job Title: Red Team Analyst
Location: Hyderabad
Experience: 3+ Yrs.
Qualification: Any Graduate
Skillsets: Red Team, Pentest, Exploit-dev, Malware Dev, Reverse Engineering, Scripting, Firewall bypass, Domain compromise, binary exploitation, code review, CTF, Bug bounty
Resource Responsibilities:

• Lead and coordinate the planning, execution, and reporting of red team engagements, including scoping the assessment objectives, defining the rules of engagement, and ensuring proper documentation.
• Mentoring and providing guidance to junior team members.
• Conducting complex and sophisticated attack simulations across various platforms and technologies.
• Developing and implementing new attack methodologies and tools.
• Assessing the overall security posture of the organization and providing strategic recommendations for improvement.
• Collaborating with stakeholders to ensure that security measures align with business objectives.
• Providing expertise and thought leadership in red teaming and penetration testing practices.
• Collaborating with other security teams to enhance overall security defenses and incident response capabilities.
• Stay up to date with the latest threats, vulnerabilities, and attack techniques by actively researching and studying emerging security trends and industry advancements.
• Contribute to the improvement of the organization's security policies, procedures, and incident response capabilities based on the findings and lessons learned from red team engagements.

Resource Requirements:

• Extensive experience in conducting red team engagements and penetration testing across diverse environments.
• Proven leadership and project management skills.
• In-depth knowledge of advanced attack techniques and methodologies.
• Strong understanding of threat intelligence and its application in red teaming.
• Experience with complex network architectures and cloud environments.
• Excellent communication and presentation skills, including the ability to effectively communicate technical findings to both technical and non-technical audiences.
• Continuous learning and staying updated on emerging security trends and technologies.

Relevant industry certifications such as OSCP (Offensive Security Certified Professional), OSCE (Offensive Security Certified Expert), or similar certifications