Shared job
Red Team Specialist
Mumbai · Staff/Principal
Applicants who checked fit first are 3.1× more likely to hear back
Your score for this role already exists
ASAI compared this JD against 41 signals - skills, seniority, domain, stack overlap etc. Add a resume and it unlocks in about 30 seconds.
No credit card · 1 tap with Google
What we know about this role
MEDIUM
Talakunchi is reviewing applications at a steady pace. Expect a standard response time as they evaluate the current pool.
First 72 hours
Window passed - posted 239d agoEarly applicants get seen before the pile builds.
Not a repost
The first time we've seen this listing - it hasn't been closed and reopened.
Skills required
22 listedYou almost certainly match several of these already. Unlock your skill map to see the matches, the gaps, and what to fix first.
Job description
- Conduct external and internal network penetration testing simulating real-world attacker methodologies.
- Identify and exploit weaknesses in Active Directory, VPNs, firewalls, cloud environments, and endpoint defenses.
- Perform privilege escalation, lateral movement, and persistence techniques within enterprise environments.
- Design and execute phishing, vishing, smishing, and pretexting campaigns.
- Perform OSINT-driven reconnaissance to craft realistic attack scenarios.
- Measure and report on human risk exposure and awareness gaps.
- Conduct physical intrusion assessments including tailgating, badge testing, and facility access evaluations.
- Test effectiveness of CCTV, access control systems, visitor management, and security personnel response.
- Coordinate with stakeholders to ensure safety, legality, and compliance during engagements.
- Develop and maintain custom attack tools, payloads, and infrastructure.
- Simulate APT-style campaigns aligned with the MITRE ATT&CK framework.
- Conduct threat emulation exercises and collaborate with Purple Teams.
- Deliver executive-level and technical reports with clear risk impact, attack paths, and remediation strategies.
- Conduct debrief sessions and tabletop exercises with SOC, IT, and leadership teams.
- Support Blue Team tuning and detection improvement initiatives.
- Strong hands-on experience in Red Teaming, Internal & External Penetration Testing.
- Deep understanding of Windows & Linux internals, Active Directory, and enterprise network architecture.
- Experience with C2 frameworks (Cobalt Strike, Sliver, Metasploit, Mythic).
- Proficiency in Python, PowerShell, Bash for scripting and automation.
- Knowledge of social engineering methodologies and OSINT tools.
- Understanding of physical security controls and access management systems.
- Familiarity with SIEM, EDR, and SOC detection workflows.
- Strong knowledge of MITRE ATT&CK and threat actor TTP mapping.
- Experience with cloud environments (AWS, Azure, GCP) is a plus.
- CRTO / CRTE / OSEP
- OSCP / OSCE / OSED
- Ethical mindset with strong focus on legal, compliance, and safety standards.
- Strong research-driven and adversary emulation mindset.
- Excellent communication and stakeholder management skills.
- Ability to operate independently and lead complex, multi-domain engagements.
- Capability to mentor and develop junior team members.
- Work on cutting-edge Red Team engagements across multiple domains.
- Opportunity to emulate advanced threat actors and strengthen enterprise defenses.
- Collaborative environment with continuous learning and growth opportunities.
Free · no signup
Get tomorrow's jobs before you have to search
Daily job drops, skill trends and free resources - posted straight to the group. Leave any time.
No spam. Just jobs and resources.
Why people use ASAI
Someone shared one job with you. ASAI keeps finding the rest.
Scored, not searched. Every role ranked against your actual profile.
Alerts as often as hourly. Reach new roles while the pile is still small.
Skill gaps, spelled out. See exactly which requirements you don't meet yet.
Verified jobs, only. Say no to ghost jobs. Your time deserves respect.
More Security Engineer roles in Mumbai
See allKeep browsing