Active Directory attacks jobs

T&T I Cyber-D&R I Manager I Red Teaming Attack Surface Management

deloitte · Posted Nov 10, 2026

Open

Mumbai, Maharashtra, India
On-site
Full-time · Senior
7+ years

T&T I Cyber-D&R I Manager I Red Teaming Attack Surface Management

deloitte · Posted Nov 10, 2026

Open

Mumbai, Maharashtra, India
On-site
Full-time · Senior
7+ years

T&T I Cyber-D&R I Assistant Manager I Red Teaming Attack Surface Management

Deloitte · Posted Nov 10, 2026

Open

Mumbai, Maharashtra, India
On-site
Full-time · Manager
3+ years

Apply with RefersoAI Apply on careers page

Lead Red Team engagements, simulate threat scenarios, assess vulnerabilities, and develop remediation reports for clients in the BFSI sector.

Responsibilities

Plan and execute Red Team engagements simulating realistic threat actor scenarios
Conduct assumed breach assessments, initial access simulations, lateral movement, and exfiltration exercises
Leverage MITRE ATT&CK framework to design threat scenarios and map findings
Exploit misconfigurations and vulnerabilities in Active Directory, cloud environments, and enterprise infrastructure
Use and integrate CART/BAS tools like Cymulate, Pycus, or similar platforms to automate and validate security posture

Requirements

Bachelor’s or Master’s degree in Computer Science, Information Security, or related field
Nice to have: Physical security assessments
Nice to have: Badge cloning
Nice to have: RFID/NFC exploitation
Nice to have: Social engineering

Skills

Red Team operations Phishing C2 infrastructure Evasion techniques

Senior Offensive Security Tester

SMX USA · Posted Nov 6, 2026

Open

Remote, United States
Remote
Full-time · Senior
6+ years

Apply with RefersoAI Apply on careers page

Run ongoing offensive testing across web applications, APIs, internal networks and cloud configurations, closing the gaps between annual pen tests and one-off engagements.

Responsibilities

Run ongoing offensive testing across web applications, APIs, internal networks and cloud configurations
Target policy administration, claims processing and customer/agent portals, with emphasis on business-logic flaws such as rate manipulation, claims fraud vectors and authorization bypass
Build and maintain custom exploit and test tooling tailored to the client's tech stack, reducing reliance on generic scanners
Validate and document findings with clear reproduction steps, severity and business impact
Feed findings into a remediation-tracking loop with engineering and retest fixes to shorten time-to-fix on critical vulnerabilities

Requirements

Nice to have: OSCP
Nice to have: OSEP
Nice to have: OSWE
Nice to have: GPEN
Nice to have: GWAPT

Skills

penetration testing red teaming web app testing API testing