Senior [Red Team] Security Consultant

ILLUME Intelligence India Pvt. Ltd.; Karnataka; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

ILLUME Intelligence India Pvt. Ltd. is seeking a Cyber Security Consultant to lead engagements across network, web, and mobile assessments. You will perform both automated and manual testing, reveal vulnerabilities, and help strengthen security controls.

Candidates should demonstrate strong OSINT, social engineering, and red team skills, with a deep understanding of Mitre ATT&CK and security tooling. The role requires rigorous testing and clear reporting.

Qualifications

• OSCP/OSCE and CEH certifications are preferred.
• Experience performing network, web, and mobile app penetration tests.
• Ability to research new vulnerabilities independently.

Responsibilities

• Conduct reconnaissance and penetration testing on targets.
• Perform targeted tests using advanced tools and manual techniques.
• Assess network and application security posture and identify gaps.
• Develop exploit tooling and red team activities.
• Lead security assessments and communicate findings clearly.

Skills

OSINT

C2/CC

Decoys

Social Engineering

Penetration Testing

Network Pen Testing

Scripting (Perl/Python/Ruby)

Exploit Development

Reverse Engineering

Network Protocols

Unix/Linux

Windows

Security Tooling

Threat Modeling

Mitre ATT&CK

Certifications Desirable

Education

OSCP/OSCE

CEH

Tools

C2 Tools

OWASP Testing Tools

SANS Toolkit

Job description

Understanding Mitre’s ATT&CK Framework.

Banglore

Posted Date :2024-03-01

Applicants for this position should demonstrate leadership and sound business judgment in anticipating client/project needs and developing alternative solutions.

Responsibilities

• Compromising the target’s security by extracting information, infiltrating its systems, or breaching its physical perimeters.
• Evading detection by the blue team, often operating within narrow timeframes that challenge the blue team's ability to neutralize threats before damage occurs.
• Exploiting bugs and weaknesses in the target’s infrastructure to identify gaps in technical security and enhance overall security posture.
• Initiating hostile activities, including sophisticated penetration testing, to assess the blue team’s defensive capabilities reliably.

Skill Sets

• Conducting initial reconnaissance using open-source intelligence (OSINT) to gather information on the target.
• Deploying command-and-control servers (C&C or C2) to establish communication with the target’s network.
• Utilizing decoys to mislead the blue team.
• Applying social engineering and phishing techniques to manipulate employees into compromising their machines or revealing sensitive information.
• Performing physical and digital penetration testing.
• Conducting network penetration testing and manipulating network infrastructure.
• Scripting or automating tasks using Perl, Python, or Ruby.
• Developing, extending, or modifying exploits, shellcode, or exploit tools.
• Reverse engineering malware, data obfuscators, or ciphers.
• Demonstrating a thorough understanding of network protocols, data on the wire, and covert channels.
• Mastery of Unix/Linux/Mac/Windows operating systems, including bash and PowerShell.
• Building security tools and automating Red Teaming workflows.
• Utilizing Threat Modeling methodologies to identify threats and shape Red Team operations.
• Understanding Mitre’s ATT&CK Framework.
• Possessing certifications from SANS and Offensive Security is highly desirable.
• Conducting Web Penetration Testing (OWASP and SANS).

Key Responsibilities For Cyber Security Consultants

• Proficiency with leading commercial and open-source automated reconnaissance and penetration testing tools and services.
• Ability to perform targeted penetration tests without relying solely on automated tools.
• Familiarity with networking fundamentals.
• Understanding of application design principles.
• Knowledge of web and mobile application exploitation methodologies.
• Ability to independently research new vulnerabilities in software products.
• Familiarity with the fundamentals of software exploitation on modern operating systems.

Qualifications

• Minimum 2 years of experience performing network, web, and mobile application penetration tests.
• Offensive Security Certified Professional (OSCP) / Offensive Security Certified Expert (OSCE).
• Certified Ethical Hacker (CEH).

Full Name*

Email*

Contact Number*

Location*

Experience*

Your LinkedIn Profile URL

Job Convenience*

Fulltime

Parttime

Freelance

On demand

Note: I consent to receive communications from Resourcifi and collect my submitted data. For more details, check out our Privacy Policy. here. By checking this box, you agree to these terms.

I agree to these terms.