RBI Group Cyber Defense Services is seeking an experienced Red Team Specialist to operate in a large, complex enterprise environment spanning multiple business units, network banks, and subsidiaries. This role combines hands-on offensive security with defender enablement: you will simulate realistic attack paths, validate security controls, and translate offensive findings into concrete improvements for detection and response teams across the Group.
The successful candidate will help raise capability on both the red and blue sides by running high-value exercises, documenting attack chains clearly, and turning technical findings into actionable improvements for defenders.
Your mission at RBI:
- Plan and execute red team and purple team engagements across enterprise, endpoint, identity, network, cloud, and web environments.
- Conduct realistic attack-path exercises against Group units and subsidiaries, aligned with approved scope and business context.
- Perform offensive activities including privilege escalation, lateral movement, persistence, defense evasion, and identity abuse in enterprise and cloud environments.
- Assess internal infrastructure, Active Directory, cloud identity, and web application attack surfaces.
- Document attack chains in a defender-centric manner, including techniques used, expected telemetry, detection gaps, and specific detection engineering recommendations.
- Work closely with blue teams, detection engineers, and incident responders to validate controls and improve detection and response coverage.
- Translate findings into prioritized remediation guidance, detection use cases, and practical follow-up actions.
- Develop or customize offensive tooling, scripts, and test scenarios where required.