Generate meaningful information from deep web or national entities or international entities about existing or emerging threats to mitigate risks and Identifying attack path that breaches organization’s security.
Responsibilities
Activity:
- Compromising the target's security by extracting information, infiltrating its systems or breaching its physical perimeters.
- Avoiding detection by the blue team. Many attacks occur over a fleeting period of time, making it extremely tricky for the blue team to neutralize the threat before the 'damage' is done.
- Exploiting bugs and weaknesses in the target's infrastructure. This highlights gaps in the organization's technical security that require fixing, thus improving its security posture.
- Initiating hostile activity - including sophisticated penetration testing - giving a reliable assessment of the blue team's defensive capabilities.
Methodology:
- Initial reconnaissance - open source intelligence (OSINT) for collecting information on the target.
- Deploying command-and-control servers (C&C or C2) to establish communication with the target's network.
- Using decoys to throw the blue team off the scent.
- Applying social engineering and phishing techniques to manipulate employees into exposing or revealing information to compromise their machines.
- Physical and digital penetration testing - typically done in a vacuum.
Qualifications
- Certified Ethical Hacker (CEH) or similar certifications preferred.
- Hands-on Web Application and API Penetration Testing.
- Practical Mobile Application Security Testing.
- Independent Reconnaissance, Attack-Surface Discovery, and Exploitation.
- Scripting, Automation and Technical Problem-Solving.
- End-to-End Assessment Ownership and Technical Reporting.
- Experience in Reverse Engineering (either or both hardware or software).
- Experience in Web Application PT including understanding of oAuth 2.0 like auth protocols.
- Experience in Mobile application PT.
- Experience in Mobile OS PT.
- Experience in Network PT (including Wireless PT).
- Experience in Thick Client PT.
- Experience in exploit writing especially in PowerShell, python.
- Experience in RFID and IoT based attacks and social engineering styled attacks.
- Experience with Windows AD red teaming with in-depth knowledge.
- Experience in any C2 server tool with in-depth knowledge.
- Experience with Malware Development and EDR Bypass.
- Experience with Bug Bounty programs, either as a triager or researcher, with strong skills in validating and assessing reported vulnerabilities.
- Experience on designing, deploying and operationalize AI Red Team projects, including setting up secure test environments and model sandboxes, building adversarial/prompt-injection tooling, running adversarial evaluations, and integrating results into engineering and CI/CD workflows.