Consultant, Offensive Security

Kroll; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Kroll is expanding its team of offensive security consultants in India, Bangalore, to deliver web, API, mobile, and infrastructure penetration tests for premier enterprises. You will draft detailed reports based on findings and client inquiries, and contribute to refining assessment methodologies while working with a V.P.

APAC Offensive Security team. You will perform web applications, API, mobile, and infrastructure testing, and help address client questions with actionable recommendations,

Qualifications

• 2+ years in cybersecurity, with at least 1 year in penetration testing, cloud security, or red teaming.
• Strong understanding of offensive security methodology and vulnerability frameworks such as the OWASP Top 10, MITRE ATT&CK, PTES, or others.
• An ability to analyze root causes and deliver technological recommendations to our clients.

Responsibilities

• Execute offensive security and consultative engagements for our clients applications, cloud assets, and infrastructure
• Author deliverables such as vulnerability reports and executive reports
• Engage with our clients to understand their requirements, update them on project status, answer their queries, and present your findings and recommendations
• Keep your skills and knowledge up to date with the latest trends in cybersecurity and emerging technology
• Willingness to work in EST Time zone as required

Skills

Penetration testing

Cloud security

Red teaming

OWASP Top 10

MITRE ATT&CK

PTES

Education

Bachelor's degree or college diploma in information security, computer science or engineering, software engineering, or IT/System/Network administration

Job description

Our Offensive Security professionals are on a mission to make the world a safer place, one company at a time. We believe that our work to help our clients discover and remediate their unique security risks makes every one of us safer. Our clients trust us to use cutting-edge offensive security tools, creativity, imagination, and expert knowledge to find cybersecurity risks in their networks, systems, and software.

We're looking to grow our team of penetration testers in India. We perform testing of web and smartphone applications, computer networks, cloud infrastructure, hardware devices, employees via social engineering, organizations via red team testing, and more.

As an Offensive Security Consultant, youll be reporting to a Vice President in our APAC Offensive Security team and deliver projects for some of the biggest enterprises in the world. You will perform various web application, API, mobile, and infrastructure penetration tests. You will also draft reports based on the assessment results and gathered evidence and help address client inquiries regarding these results. In addition to the execution of traditional security assessments, you will participate in their refinement and improvement.

Below are the roles and responsibilities for the Consultant, Offensive Security role based in Bangalore, India:

Day to day responsibilities

• Execute offensive security and consultative engagements for our clients applications, cloud assets, and infrastructure
• Author deliverables such as vulnerability reports and executive reports
• Engage with our clients to understand their requirements, update them on project status, answer their queries, and present your findings and recommendations
• Keep your skills and knowledge up to date with the latest trends in cybersecurity and emerging technology
• Willingness to work in EST Time zone as required

Essential traits

• 2+ years in cybersecurity, with at least 1 year in penetration testing, cloud security, or red teaming
• A strong understanding of offensive security methodology and vulnerability frameworks such as the OWASP Top 10, MITRE ATTCK, PTES, or others
• An ability to analyze root causes and deliver technological recommendations to our clients

Prerequisites

• Bachelors degree or college diploma in information security, computer science or engineering, software engineering, or IT/System/Network administration
• Excellent oral and written communication skills
• Experience working both as part of a team and independently