Senior Associate, Offensive Security

RSM US in India; Gurugram District; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

RSM US in India is seeking an Application Penetration Tester - Offensive Security Testing (Sr. Associate) to lead and perform security assessments across Web, API, network, and cloud environments.

You will conduct red teaming, AI security testing, and provide clear remediation guidance to clients. You will collaborate with diverse teams, mentor junior staff, and stay ahead of evolving threats while maintaining the highest standards of integrity and confidentiality.

Qualifications

• BS in Computer Science, Engineering, Cybersecurity, or related field, or equivalent work experience.
• 5+ years of Offensive Security, Penetration Testing, Red Teaming, or related security domains.
• Advanced expertise in Web & API Security, including vulnerability identification and exploitation techniques.
• Hands-on experience with Network Penetration Testing, Active Directory attacks, privilege escalation, lateral movement, and post-exploitation.
• Experience with Red Teaming, Adversary Simulation, and MITRE ATT&CK-based techniques.
• Experience with Cloud Security Assessments across AWS, Azure, and/or GCP
• Knowledge of Purple Teaming, BAS, and security control validation.
• Experience or understanding of EDR/AV evasion, C2, and post-exploitation techniques.
• Experience with Application Security, SAST/DAST, and Code Review is preferred.
• Exposure to AI/LLM Security Testing and AI Red Teaming is preferred.
• Proficient scripting/programming such as Python, PowerShell, Bash, or JavaScript.
• Excellent written and verbal communication skills with the ability to clearly communicate technical findings to senior management and clients.
• Must possess integrity and confidentiality and adhere to security testing best practices.
• Preferred certifications such as OSCP, OSEP, OSWE, CRTO, CRTP, CREST, or Burp Suite Practitioner.

Responsibilities

• Lead and conduct security assessments, including Web & API Penetration Testing, Network Penetration Testing, and Application Security Testing.
• Conduct Red Teaming and Adversary Simulation exercises using real-world attack techniques.
• Perform Active Directory security assessments, including privilege escalation, lateral movement, and attack-path analysis.
• Conduct Cloud Security Assessments and Penetration Testing across AWS, Azure, and GCP environments.
• Perform Purple Team Exercises and BAS to assess and improve security controls.
• Conduct AI/LLM Security Testing and AI Red Teaming to identify risks.
• Apply offensive security techniques including EDR/AV evasion, C2, privilege escalation, lateral movement, and post-exploitation.
• Perform Application Security assessments and Code Reviews as required.
• Collaborate with clients and clearly articulate findings, attack scenarios, risks, and remediation.
• Stay current with latest offensive security techniques and emerging technologies.
• Lead and mentor staff on engagements.

Skills

Web security

API security

Pentest

Active Directory attacks

MITRE ATT&CK

Cloud security

Scripting

Communication

Education

BS in Computer Science or related

Tools

Python

PowerShell

Bash

JavaScript

Job description

About us

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You'll find an environment that inspires and empowers you to thrive both personally and professionally. There's no one like you and that's why there's nowhere like RSM.

Application Penetration Tester - Offensive Security Testing (Sr. Associate)

Role Responsibilities

• Lead and conduct security assessments, including Web & API Penetration Testing, Network Penetration Testing, and Application Security Testing
• Conduct Red Teaming and Adversary Simulation exercises using real-world attack techniques and TTPs
• Perform Active Directory security assessments, including privilege escalation, lateral movement, and attack-path analysis
• Conduct Cloud Security Assessments and Penetration Testing across AWS, Azure, and GCP environments
• Perform Purple Team Exercises and Breach & Attack Simulation (BAS) to assess and improve security controls and detection capabilities
• Conduct AI/LLM Security Testing and AI Red Teaming to identify security risks associated with emerging AI technologies
• Apply offensive security techniques including EDR/AV evasion, Command & Control (C2), privilege escalation, lateral movement, and post-exploitation in authorized testing environments
• Perform Application Security assessments and Code Reviews as required
• Collaborate with clients across different technology environments and clearly articulate technical findings, attack scenarios, risks, and remediation recommendations
• Stay current with the latest Offensive Security techniques, adversary TTPs, vulnerabilities, AI/LLM security, and emerging technologies
• Lead and foster teamwork and open communication to deliver successful engagements
• Supervise, mentor, and provide technical guidance to staff working on assigned engagements

Qualifications and Experience

• BS in Computer Science, Engineering, Cybersecurity, or related field, or equivalent work experience
• 5+ years of experience in Offensive Security, Penetration Testing, Red Teaming, or related security domains
• Advanced expertise in Web & API Security, including vulnerability identification and exploitation techniques
• Hands‑on experience with Network Penetration Testing, Active Directory attacks, privilege escalation, lateral movement, and post-exploitation
• Experience with Red Teaming, Adversary Simulation, and MITRE ATT&CK-based techniques
• Experience with Cloud Security Assessments across AWS, Azure, and/or GCP
• Knowledge of Purple Teaming, Breach & Attack Simulation (BAS), and security control validation
• Experience or understanding of EDR/AV evasion, Command & Control (C2), and post-exploitation techniques
• Experience with Application Security, SAST/DAST, and Code Review is preferred
• Exposure to AI/LLM Security Testing and AI Red Teaming is preferred
• Proficient scripting/programming skills such as Python, PowerShell, Bash, or JavaScript
• Excellent written and verbal communication skills with the ability to clearly communicate technical findings to senior management and clients
• Must possess a high degree of integrity and confidentiality and adhere to company policies and security testing best practices
• Preferred, but not required - relevant certifications such as OSCP, OSEP, OSWE, CRTO, CRTP, CREST, Burp Suite Certified Practitioner, or other relevant Offensive Security certifications

Shift Timing: - Rotational Shift

At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life's demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmus.com/careers/india.html.

RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Indian Armed Forces; Indian Armed Forces Veterans, and Indian Armed Forces Personnel status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please send us an email at [e-mail].