Security Engineer II

Interactive Brokers; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Competitive salary package

Performance-based annual bonus

Hybrid working model

Group Medical & Life Insurance

Modern offices with free amenities

Monthly food card

Hardship/shift allowance

Employee referral bonus

Company-sponsored team-building events

Job summary

Interactive Brokers in Mumbai is seeking a skilled cybersecurity professional to enhance security through phishing simulations and breach attack simulations. This role combines technical expertise with creativity to improve the organization’s security posture against various threats.

Qualified candidates will have at least 3 years of experience in cybersecurity, focusing on phishing simulations, and must have hands-on experience with BAS tools. The position offers a hybrid working model and competitive salary with additional perks.

Qualifications

• 3+ years of experience in cybersecurity with focus on phishing simulations and/or red team operations.
• Hands-on experience with BAS tools.
• Strong understanding of domain and server setup for phishing operations.

Responsibilities

• Design and execute phishing simulation campaigns.
• Configure and operate BAS tools to simulate attack scenarios.
• Collaborate with security teams to improve security posture.

Skills

Phishing simulation

Red Team operations

Analytical skills

Communication skills

Network security

Education

Bachelor's degree in Cybersecurity, IT, or related field

Tools

Breach Attack Simulation (BAS) tools

Phishing simulation tools

Job description

Job Description

Posted Tuesday, June 23, 2026 at 12:30 AM

Company Overview

Interactive Brokers Group, Inc. (Nasdaq: IBKR) is a global financial services company headquartered in Greenwich, CT, USA, with offices in over 15 countries. We have been at the forefront of financial innovation for over four decades, known for our cutting‑edge technology and client commitment.

IBKR affiliates provide global electronic brokerage services around the clock on stocks, options, futures, currencies, bonds, and funds to clients in over 200 countries and territories. We serve individual investors and institutions, including financial advisors, hedge funds and introducing brokers. Our advanced technology, competitive pricing, and global market help our clients to make the most of their investments.

Barron's has recognized Interactive Brokers as the #1 online broker for six consecutive years. Join our dynamic, multi‑national team and be a part of a company that simplifies and enhances financial opportunities using state‑of‑the‑art technology.

About the Role

We are seeking a skilled cybersecurity professional to join our team in a dual role focused on Phishing Simulation and Red Team Breach Attack Simulation (BAS). This position requires expertise in both conducting phishing campaigns and operating BAS tools to simulate various attack scenarios beyond phishing. The role is critical for assessing and improving our organization's security posture against multiple threat vectors.

Key Responsibilities

Phishing Simulation

• Design, develop, and execute sophisticated phishing simulation campaigns tailored to organizational needs


• Create and manage the technical infrastructure required for phishing simulations, including domains and servers


• Develop realistic phishing email content and landing pages that reflect current threat actor tactics


• Generate comprehensive phishing reports with metrics, findings, and recommendations


• Track user susceptibility to phishing attempts and measure improvement over time


• Collaborate with security awareness teams to develop targeted training based on simulation results

Breach Attack Simulation (BAS)

• Configure and operate BAS tools to simulate various attack scenarios beyond phishing (e.g. ransomware, lateral movement, data exfiltration)


• Design realistic red team scenarios to test security controls across the organization


• Troubleshoot technical issues with BAS tools and ensure proper execution of attack scenarios and that log events are being raised and ingested


• Analyze BAS results to identify security gaps and control weaknesses


• Provide recommendations for security improvements based on BAS findings


• Stay current with emerging attack techniques and implement them in simulation scenarios


• Document and maintain BAS procedures and playbooks

General

• Collaborate with security teams to prioritize remediation efforts based on simulation findings


• Contribute to the development of security policies and procedures


• Maintain knowledge of current cybersecurity threats and attack methodologies


• Participate in security assessment activities as needed

Technical Requirements

• Strong understanding of domain and server setup for phishing operations, including technical components such as:


• DNS configuration (A records, MX records, CNAME)


• Web server configuration and management


• SSL/TLS certificate implementation


• Solid networking knowledge including:


• TCP/IP protocols


• Firewalls and routing


• Network security principles


• Experience operating BAS tools and understanding attack chain methodologies


• Familiarity with Red Team concepts and tactics


• Working knowledge of Vulnerability Assessment and Penetration Testing (VAPT)


• Experience with infrastructure set‑up and management


• Creative approach to developing realistic attack scenarios and campaigns

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent work experience)


• 3+ years of experience in cybersecurity with focus on phishing simulations and/or red team operations


• Hands‑on experience with BAS tools


• Basic understanding of infrastructure setup and management

Preferred Certifications (one or more)

• Certified Ethical Hacker (CEH)


• eLearnSecurity Junior Penetration Tester (eJPT)


• Offensive Security Certified Professional (OSCP)


• Practical Network Penetration Tester (PNPT)


• Certified Red Team Professional (CRTP)


• Certified Red Team Operator (CRTO)

Personal Attributes

• Strong analytical and problem‑solving skills


• Excellent written and verbal communication abilities


• Attention to detail and methodical approach to work


• Ability to work independently and as part of a team


• Commitment to continuous learning and professional development


• Creative mindset for developing effective security testing scenarios

Join our team to help strengthen our security defenses through comprehensive security simulations and contribute to building a more resilient security posture for our organization.

Company Benefits & Perks:

• Competitive salary package.


• Performance based annual bonus (cash and stocks).


• Hybrid working model (3 days office/week).


• Group Medical & Life Insurance.


• Modern offices with free amenities & fully stocked cafeterias.


• Monthly food card & company paid snacks.


• Hardship/shift allowance with company provided pickup & drop facility


• Attractive employee referral bonus.


• Frequent company sponsored team building events and outings.

* Depending upon the shifts.

**The benefits package is subject to change at the management's discretion.