| Company | Deloitte |
| Job Title | Assistant Manager – Red Teaming & Attack Surface Management |
| Job Requisition ID | 108573 |
| Location | Mumbai |
| Entity | Deloitte Touche Tohmatsu India LLP |
| Business Area | T&T Cyber – Defense & Resilience |
| Experience | 5+ Years |
| Domain | Offensive Security / Red Teaming |
| Industry Focus | BFSI |
| Red Team Skills | Phishing, C2 Infrastructure, Evasion, Privilege Escalation, Data Exfiltration |
| Active Directory | Kerberoasting, Pass-the-Hash/Ticket, ACL Abuse, DCShadow |
| Security Areas | Network, Cloud, Endpoint Security & Enterprise Infrastructure |
| Tools & Frameworks | Cobalt Strike, Metasploit, Empire, Covenant, MITRE ATT&CK, NIST |
| Attack Simulation | External, Internal, Physical, Assumed Breach & Threat Emulation |
| Attack Surface | Active Directory, Cloud Environments, Enterprise Infrastructure |
| BAS/CART Tools | Cymulate, Pycus or similar platforms |
| Blue Team Collaboration | Evaluate Detection, Prevention and Response Capabilities |
| Security Exercises | Purple Teaming, Tabletop Exercises, Security Awareness |
| Physical Security | Badge Cloning, RFID/NFC Exploitation & Social Engineering – preferred |
| BFSI Compliance | RBI, SEBI, ISO 27001 |
| Certifications | OSCP or CRTP – Mandatory |
| Key Responsibilities | Plan and execute Red Team engagements, simulate realistic attacks, identify vulnerabilities and provide remediation recommendations |
| Reporting | Document findings, map risks to security frameworks and present results to technical & executive stakeholders |
| Education | B.E./B.Tech (Tier 1/2) or Bachelor’s/Master’s in Information Security, Computer Science or related field |
| Key Skills | Offensive Security, Red Teaming, Threat Emulation, AD Security, Cloud Security, Risk Assessment |
| Soft Skills | Analytical Thinking, Problem Solving, Communication & Stakeholder Management |
| Ideal Candidate | Experienced Red Team professional with BFSI exposure and strong hands-on offensive security expertise |
