Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Red Teaming
Good to have skills : NA
Minimum 7.5 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary: As a Security Architect, you will oversee the strategic planning and execution of red team operations to emulate real-world threats and uncover security weaknesses across the organization. Your typical day will involve planning, scoping and conducting red team operations, including social engineering, network exploitation, and post-exploitation activities along with leading a team of offensive security experts, and aligning red team efforts with business risk priorities. You will work closely with incident response, and threat intelligence teams to identify detection gaps and provide actionable insights, ensuring the organization remains prepared against evolving threats, while fostering a culture of continuous learning and adversary-aware defense. Roles & Responsibilities: - Expected to be an SME. - Collaborate and manage the team to perform. - Responsible for team decisions. - Engage with multiple teams and contribute on key decisions. - Plan, scope, and execute red team exercises simulating real-world attack scenarios. - Perform threat modeling and adversary emulation exercises based on MITRE ATT&CK framework. - Conduct internal and external penetration tests, including physical security and social engineering engagements. - Design and deliver phishing campaigns and other social engineering attacks to test human security posture. - Establish and manage command-and-control (C2) infrastructures using tools like Cobalt Strike. - Perform post-exploitation tasks including lateral movement, Active Directory (AD) exploitation, privilege escalation, and data exfiltration. - Identify gaps in detection and response capabilities and provide detailed reports and remediation recommendations. - Collaborate with Blue Team and Incident Response to enhance organizational defense. - Continuously research emerging threats, TTPs, and contribute to the development of new testing methodologies. - Provide solutions to problems for their immediate team and across multiple teams. - Facilitate training sessions to enhance team knowledge and skills. - Monitor and evaluate the effectiveness of security measures and recommend improvements. Professional & Technical Skills: - Deep understanding of red team tactics, techniques, and procedures (TTPs) align with MITRE ATT&CK framework. - Proven experience in conducting end-to-end red team engagements across different environments (on-prem, cloud, hybrid). - Proficient with red team tools such as Cobalt Strike, Mythic, Metasploit, Bloodhound, Sharp hound, PowerShell Empire, Impacket - Expertise in EDR/AV evasion techniques, custom payload development, and OPSEC-aware operations. - Skilled in Active Directory attacks, Kerberoasting, Pass-the-Hash/Ticket, and Golden/Silver ticket attacks. - Proficient in hardware-based and physical attack techniques including Rubber Ducky payload deployment, planting rogue devices such as LAN Turtle, Raspberry Pi, NAC bypass. Executing Wi-Fi attacks like Evil Twin attacks, and RFID cloning for physical access simulation and red team engagements. - Strong knowledge of data exfiltration methods and covert communication channels. - Experience with phishing toolkits and infrastructure for social engineering campaigns. - Familiarity with scripting and automation using PowerShell, Python, or Bash. - Comfortable working under strict ethical and legal boundaries, with a strong focus on operational safety. Additional Information: - The candidate should have minimum 7.5 years of experience in Red Teaming. - Certifications- OSCP, OSEP, CRTP, CRTE, CRTO. - This position is based at our Bengaluru office. - A 15 years full time education is required.