ISS | Red Team Specialist

About the Role

This role will serve as a subject matter expert for Banks Red Team Operations team. The incumbent will be responsible for performing the advanced red team assessments, simulating real-world attacks to identify vulnerabilities, assess security measures, and improve the Banks and its subsidiaries overall resilience against cyber threats.

Key Responsibilities

Red Team Operations -

• Plan, execute, and report red team engagements simulating advanced persistent threats (APTs).
• Perform manual and automated assessments to discover weaknesses in the target systems.
• Identify and exploit vulnerabilities in systems, networks, applications, and cloud infrastructure.
• Exploit misconfigurations, bypass security controls, and perform privilege escalation.

Attack Simulation -

• Develop custom attack scenarios tailored to the banking industrys threat landscape.
• Emulate tactics, techniques, and procedures (TTPs) used by threat actors targeting financial institutions.
• Perform stealthy and realistic attacks to test detection and response capabilities.
• Simulate ransomware attack, lateral movement within networks and other advanced malware attacks.

Collaboration and Reporting -

• Work closely with application security testing team, vulnerability assessment team and SOC team to evaluate detection, response, and mitigation capabilities.
• Participate in purple team exercises to enhance overall security posture of the organization.
• Document findings and prepare comprehensive post-engagement reports with actionable recommendations.
• Continuous Learning:
• Stay updated on emerging threats, vulnerabilities, and attack techniques targeting the banking industry.
• Participate in red team exercises, Capture the Flag (CTF) events, and offensive security training.