Senior Offensive Security Engineer(Red Team/Penetration Tester)

Systools Software; Pune District, Mumbai, Delhi; On-site; INR 1,400,000 - 2,800,000; Full time

Job summary

Systools Software in Pune, India, is seeking a Senior Red Team Security Engineer to lead offensive security engagements across networks, cloud, and AD environments.

You will plan and execute adversary simulations, perform AD security assessments, conduct internal and external network testing, and mentor junior team members while delivering clear remediation guidance.

Qualifications

• Certifications such as OSCP, OSEP, OSWE, OSED, OSCE3, CRTO, CRTP, PNPT, CPTS, GPEN, or equivalent.
• Experience testing AWS, Azure, or GCP environments.
• Exposure to Docker, Kubernetes, and cloud-native infrastructure security.
• Experience with vulnerability research, exploit development, bug bounty programs, published CVEs, or open-source security contributions is an advantage.

Responsibilities

• Red Team Operations: Plan and execute objective-based Red Team engagements simulating realistic adversary behavior.
• AD security: Advanced AD assessments including privilege escalation, lateral movement, Kerberos/NTLM attacks, credential abuse, ACL misconfigurations, AD CS exploitation, and attack-path analysis.
• Network Penetration Testing: Conduct internal and external network penetration testing across servers, endpoints, firewalls, VPNs, switches, and exposed services.
• Advanced VAPT: Penetration testing of web apps, APIs, infrastructure, and other assets using manual and automated techniques.
• Adversary simulation: Develop or modify scripts and tooling to test security controls such as EDR, AV, WAF, IDS/IPS, and network segmentation.
• Post-Exploitation: Privilege escalation, credential access, pivoting, tunneling, and lateral movement within authorized environments.
• Purple Teaming: Collaborate with SOC/Blue Team to validate detections, review telemetry, and improve monitoring and response.
• Reporting & Remediation: Prepare technical reports covering vulnerabilities, attack chains, business impact, evidence, and remediation.
• Mentorship: Provide technical guidance and mentorship to junior and mid-level security team members.

Skills

Certifications

Cloud security

Docker/Kubernetes

Vulnerability research

Job description

Role & responsibilities

• Red Team Operations: Plan and execute objective-based Red Team engagements simulating realistic adversary behavior.
• Active Directory Security: Perform advanced AD assessments including privilege escalation, lateral movement, Kerberos/NTLM attacks, credential abuse, ACL misconfigurations, AD CS exploitation, and attack-path analysis.
• Network Penetration Testing: Conduct internal and external network penetration testing across servers, endpoints, firewalls, VPNs, switches, and exposed services.
• Advanced VAPT: Perform penetration testing of web applications, APIs, infrastructure, and other in-scope assets using a combination of manual and automated techniques.
• Adversary Simulation: Develop or modify scripts, payloads, and tooling to test the effectiveness of security controls such as EDR, AV, WAF, IDS/IPS, and network segmentation.
• Post-Exploitation: Perform privilege escalation, credential access, pivoting, tunneling, and lateral movement within authorized environments.
• Purple Teaming: Collaborate with SOC/Blue Team members to validate detections, review attack telemetry, and improve monitoring and response capabilities.
• Reporting & Remediation: Prepare clear technical reports covering vulnerabilities, attack chains, business impact, evidence, risk ratings, and actionable remediation.
• Mentorship: Provide technical guidance and mentorship to junior and mid-level security team members.

Preferred candidate profile

• Certifications such as OSCP, OSEP, OSWE, OSED, OSCE3, CRTO, CRTP, PNPT, CPTS, GPEN, or equivalent.
• Experience testing AWS, Azure, or GCP environments.
• Exposure to Docker, Kubernetes, and cloud-native infrastructure security.
• Experience with vulnerability research, exploit development, bug bounty programs, published CVEs, or open-source security contributions is an advantage.