Description :

Job Title : Red Team Engineer

Experience : Minimum 3+ Years

Required Skills :

- OSINT & cloud recon (Azure/AWS/GCP)

- Web Application Exploitation

- VAPT

- Spear phishing, MFA bypass, VPN/VDI exploitation

- AD attacks, privilege escalation, lateral movement

- EDR evasion & detection bypass

- CI/CD & DevOps abuse (GitHub/Azure DevOps)

- Cloud red teaming (Azure/AWS IAM abuse, persistence, privilege escalation)

- Data exfiltration (SharePoint/OneDrive/VDI/VPN)

- Ransomware & impact simulation (safe/non-destructive)

- Good reporting & artifact cleanup

- (Bonus) Physical red teaming exposure

Eligibility :

- Minimum 3+ years red teaming experience

- Strong hands-on offensive knowledge

- Cloud + hybrid environment experience preferred

Job Summary :

We are seeking a highly skilled Red Team Engineer with strong hands-on experience in offensive security, adversary simulation, and cloud-based attack techniques.

The ideal candidate will have practical exposure to cloud and hybrid environments, a deep understanding of modern attack chains, and the ability to safely simulate real-world threats while maintaining professional reporting standards.

Key Responsibilities :

- Conduct red team engagements simulating real-world adversaries across on-prem, cloud, and hybrid environments

- Perform OSINT, reconnaissance, and cloud enumeration across AWS, Azure, and GCP

- Execute web application exploitation, vulnerability assessment, and penetration testing (VAPT)

- Carry out spear phishing campaigns, MFA bypass techniques, and VPN/VDI exploitation

- Perform Active Directory attacks, including privilege escalation and lateral movement

- Test EDR evasion and detection bypass techniques within approved engagement scopes

- Abuse CI/CD and DevOps pipelines (GitHub, Azure DevOps) to identify security gaps

- Conduct cloud red teaming, including IAM abuse, persistence mechanisms, and privilege escalation

- Simulate data exfiltration scenarios involving SharePoint, OneDrive, VDI, and VPN environments

- Perform ransomware and impact simulations in a safe, non-destructive manner

- Ensure proper artifact cleanup and operational security post-engagement

- Deliver high-quality technical and executive-level reports with actionabl