SENIOR ENGINEER - ENGINEER

Happiest Minds Technologies; Maharashtra; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

A leading technology firm is seeking an experienced Application Security Engineer specializing in Red Teaming and Ethical Hacking. This role involves conducting advanced security assessments, penetration testing for web and mobile applications, and validating security measures across platforms. Ideal candidates will have 5-8 years of relevant experience, a Bachelor's degree in a relevant field, and essential certifications like Offensive Security Certified Professional. The position requires availability for extended hours during critical simulations.

Qualifications

• 5 to 8 years of experience in application security.
• Strong expertise in red teaming and ethical hacking.
• Essential certifications including Offensive Security Certified Professional or similar.

Responsibilities

• Execute multi-stage adversary simulations.
• Perform Active Directory exploitation and internal network pivoting.
• Conduct web and mobile application penetration testing.
• Validate detection capabilities of security systems.
• Log findings and track closure in incident management portal.

Skills

Red Teaming

Ethical Hacking

Privilege escalation

Credential harvesting

Lateral movement techniques

Web Application Firewall evasion

Education

Bachelor's degree in computer science, Information Security, or Engineering

Tools

Cobalt Strike

Metasploit Framework

Mimikatz

Burp Suite

Nmap

Nessus

Impacket

Job description

Position: Application Security Engineer - Red Teaming and Ethical Hacking Specialist - L2.

Experience Required: 5 to 8 Years.
Mandatory Skills: Red Teaming and Ethical Hacking.

Role Objective:

The L2 Specialist shall execute advanced penetration testing and red team engagements and provide technical support to the Level 3 Lead.

Key Responsibilities:

• Execute multi-stage adversary simulations.
• Perform Active Directory exploitation and internal network pivoting.
• Conduct web application penetration testing aligned to Open Web Application Security Project standards.
• Conduct mobile application security testing for Android and iOS.
• Perform vulnerability assessment and follow-up remediation validation.
• Validate detection capabilities of Endpoint Detection and Response and Security Information and Event Management systems.
• Conduct Deep Web and Dark Web monitoring related to the Bank's attack surface.
• Participate in Blue Team exercises.
• Log findings and track closure in incident management portal.

Technical Skills Required:

• Strong expertise in:
  • Privilege escalation and credential harvesting.
  • Lateral movement techniques.
  • Web Application Firewall evasion concepts.

  • Secure code review basics.

    Experience using tools including: Cobalt Strike, Metasploit Framework, Mimikatz, BloodHound, Burp Suite, Nmap, Nessus and Impacket.

Educational Qualification:

• Bachelor's degree in computer science, Information Security, or Engineering (BSc-IT/CS, BE/ B.Tech./BCA).

Essential Certifications (Minimum Two Required):

Any one below certification must mandatorily be:

• Offensive Security Certified Professional issued by Offensive Security.

Additionally, at least one of the following:

• Certified Red Team Professional.
• Licensed Penetration Tester issued by EC-Council.

Working Conditions:

• Six days working per week.
• Mandatory working on all Bank working Saturdays.
• Minimum 24 working days per month.
• Availability for extended hours during simulation exercises.