Principle Penetration Tester – Red Team Expert

engineersmind; Pune District; On-site; INR 3,000,000 - 4,600,000; Full time

Job summary

EngineersMind in Pune, India seeks an experienced Red Team / Offensive Security Engineer to drive end-to-end adversary simulations. The role requires hands-on testing across network, cloud, and identity environments, with emphasis on Azure AD/Entra ID and enterprise-scale engagements.

The candidate should possess OSCP and 7+ years in cybersecurity, strong reporting skills, and ability to communicate findings to clients and technical stakeholders.

Qualifications

• 7 years of experience in Cybersecurity / Offensive Security.
• Strong hands-on Red Teaming experience, preferably in enterprise environments.
• OSCP certification – Mandatory.
• Experience with Active Directory and Azure AD/Entra ID attacks.
• Hands-on Azure Cloud Security / Cloud Penetration Testing experience.
• Strong understanding of Networking concepts and network penetration testing.
• Experience with lateral movement, privilege escalation, credential attacks, persistence and attack-path development.
• Experience conducting end-to-end Red Team engagements, not just vulnerability assessments.
• Ability to work on large and complex client/enterprise infrastructures.
• Strong technical reporting and client-facing communication skills.

Responsibilities

• Conduct end-to-end Red Team engagements including reconnaissance, initial access, privilege escalation, lateral movement, persistence and objective-based attacks.
• Perform enterprise-level penetration testing across network, application, cloud, and Active Directory environments.
• Identify and exploit weaknesses in Active Directory and Azure AD/Entra ID environments.
• Assess Azure cloud infrastructure for security vulnerabilities and misconfigurations.
• Perform network security assessments, including internal and external tests.
• Conduct social engineering/phishing simulations as required for Red Team engagements.
• Execute Red Team exercises against large and complex enterprise infrastructures.
• Document attack paths, vulnerabilities, exploitation techniques, business impact, and remediation recommendations.
• Prepare detailed technical reports and present findings to technical and client stakeholders.

Skills

Red Teaming

Offensive Security

OSCP certification

AD/Entra ID attacks

Azure Cloud Security

Network penetration testing

Credential attacks

Client-facing communication

Tools

BloodHound

Mimikatz

PowerView

Rubeus

Cobalt Strike

Sliver

Job description

Experience: 7 years

Role Type: Red Team / Offensive Security

Key Responsibilities

• Conduct end-to-end Red Team engagements including reconnaissance, initial access, privilege escalation, lateral movement, persistence, and objective-based attacks.
• Perform enterprise-level penetration testing and adversary simulation across network, application, cloud, and Active Directory environments.
• Identify and exploit weaknesses in Active Directory and Azure Active Directory/Entra ID environments.
• Assess Azure cloud infrastructure for security vulnerabilities, misconfigurations, identity and access-control weaknesses.
• Perform network security assessments, including internal/external network penetration testing.
• Conduct social engineering/phishing simulations where required as part of Red Team engagements.
• Execute Red Team exercises against large and complex enterprise infrastructures.
• Document attack paths, vulnerabilities, exploitation techniques, business impact, and remediation recommendations.
• Prepare detailed technical reports and present findings to technical and client stakeholders.

Key Requirements

• 7 years of overall experience in Cybersecurity / Offensive Security.
• Strong hands-on Red Teaming experience, preferably in enterprise environments.
• OSCP certification – Mandatory.
• Strong experience with Active Directory and Azure AD/Entra ID attacks.
• Hands-on experience with Azure Cloud Security / Cloud Penetration Testing.
• Strong understanding of Networking concepts and network penetration testing.
• Experience with lateral movement, privilege escalation, credential attacks, persistence and attack-path development.
• Experience conducting end-to-end Red Team engagements, not only vulnerability assessment/VAPT.
• Ability to work on large and complex client/enterprise infrastructures.
• Strong technical reporting and client-facing communication skills.

Good to Have

• CRTO / CRTP certification
• Experience with C2 frameworks such as Cobalt Strike, Sliver, etc.
• Experience with AD attack tools and techniques such as BloodHound, Mimikatz, PowerView, Rubeus, etc.
• Experience in social engineering / phishing simulations.
• Cloud penetration testing experience across Azure/AWS.
• Experience with adversary simulation and threat-informed Red Team operations.