Red Team Specialist, Financial Services

Kerry Consulting; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Kerry Consulting client, a leading financial services organisation establishing a new Red Team capability in Singapore, seeks offensive security professionals to shape a growing security function.

You will conduct adversary simulations and Red Team engagements focused on Windows and Active Directory, identifying privilege escalation opportunities and lateral movement paths, while helping develop infrastructure and tooling to support offensive operations.

Qualifications

• Hands-on Red Teaming or adversary simulation experience.
• In-depth knowledge of Active Directory security (Kerberos, NTLM, delegation, ACLs, domain trust).
• Experience identifying privilege escalation, credential access and lateral movement in Windows environments.
• Familiarity with offensive security tools such as BloodHound, Rubeus, Impacket, Mimikatz, PowerView, NetExec.

Responsibilities

• Conduct adversary simulations and Red Team engagements mirroring real-world attacks.
• Develop supporting infrastructure, tooling and automation for offensive security operations.
• Assess effectiveness of defensive controls and communicate attack scenarios and remediation priorities to stakeholders.
• Collaborate with security and technology teams to harden Windows/AD environments.

Skills

Red Teaming

Adversary simulation

Offensive security

Active Directory security

Privilege escalation

Lateral movement

BloodHound

PowerShell

Python

C# / Go

Tools

BloodHound

Rubeus

Impacket

Mimikatz

PowerView

NetExec

Job description

Our client is a leading financial services organisation establishing a new Red Team capability in Singapore. This opportunity is suited to offensive security professionals who enjoy operating in complex enterprise environments and want to play an active role in shaping a growing security function.

Role

You will conduct adversary simulation and Red Team engagements designed to replicate sophisticated real-world attacks, with a strong focus on Windows and Active Directory environments. The role will involve identifying and chaining identity-related weaknesses, privilege escalation opportunities and lateral movement paths to demonstrate potential routes to critical systems. Beyond executing offensive operations, you will also help develop supporting infrastructure, tooling and automation, assess the effectiveness of defensive controls, and communicate attack scenarios and remediation priorities to security and technology stakeholders.

Requirements

• Strong hands-on experience in Red Teaming, adversary simulation, advanced penetration testing or a closely related offensive security discipline.
• In-depth knowledge of Active Directory security, including Kerberos, NTLM, delegation, ACLs, service accounts, certificate services and domain trust relationships.
• Practical experience identifying and exploiting privilege escalation, credential access and lateral movement opportunities within complex Windows environments.
• Familiarity with offensive security tools such as BloodHound, Rubeus, Impacket, Mimikatz, PowerView, NetExec or comparable technologies.
• Scripting or development experience in Python, PowerShell, C#, Go or similar languages is advantageous, together with the ability to think in terms of end-to-end attack chains rather than isolated vulnerabilities.