SISA Information Security - Network Security Engineer

Experience : 7 - 10 years. Location : Bangalore. Employment Type : Full-time. Role Summary : We are looking for a senior offensive security professional with strong expertise in red team operations, adversary emulation, black-box network penetration testing, cloud penetration testing, phishing simulations, C2 operations, and custom exploit development. The role requires hands-on capability to simulate real-world attacker behavior, develop attack paths, bypass security controls in authorized environments, and deliver high-quality technical findings with practical remediation guidance. Key Responsibilities : - Lead red team, adversary emulation, black-box network, cloud, and infrastructure penetration testing engagements. - Plan and execute attack scenarios covering reconnaissance, initial access, exploitation, privilege escalation, lateral movement, persistence, and objective-based actions. - Use adversary emulation platforms and C2 frameworks such as Cobalt Strike, Sliver, Mythic, Havoc, Metasploit, and similar tools in authorized assessments. - Design and execute phishing simulation campaigns, payload delivery scenarios, and initial access simulations. - Perform custom exploit development, exploit modification, payload customization, and proof-of-concept development for identified vulnerabilities. - Conduct Active Directory and hybrid identity attack simulations, including credential attacks, lateral movement, privilege escalation, and domain compromise scenarios. - Perform cloud penetration testing across AWS, Azure, and GCP, focusing on IAM abuse, exposed assets, storage misconfigurations, insecure networking, excessive permissions, and privilege escalation paths. - Assess endpoint, network, identity, cloud, and email security controls from an attackers perspective. - Support purple team and detection validation exercises by mapping techniques to MITRE ATT&CK. - Prepare detailed reports covering attack chains, exploited weaknesses, business impact, evidence, and remediation recommendations. - Present findings and attack narratives to technical teams, leadership, and client stakeholders. - Mentor junior team members and contribute to red team playbooks, tooling, labs, and methodologies. Required Skills : - Strong hands-on expertise in red teaming, adversary emulation, black-box testing, network penetration testing, and cloud pentesting. - Practical experience with C2 and adversary emulation platforms such as Cobalt Strike, Sliver, Mythic, Havoc, Metasploit, Covenant, or similar frameworks. - Experience in phishing simulations, payload delivery, social engineering assessments, and initial access simulation. - Ability to perform custom exploit development, exploit chaining, payload customization, and proof-of-concept creation. - Strong knowledge of Active Directory attack techniques, including Kerberoasting, AS-REP roasting, NTLM relay, pass-the-hash, pass-the-ticket, delegation abuse, ACL abuse, and domain escalation paths. - Good understanding of cloud attack techniques across AWS, Azure, and GCP, including IAM abuse, storage exposure, metadata service abuse, key leakage, role assumption, and privilege escalation. - Experience with tools such as BloodHound, Mimikatz, Impacket, NetExec/CrackMapExec, Responder, Evilginx, GoPhish, Nmap, Masscan, Nessus, Burp Suite, Wireshark, Hashcat, Hydra, Pacu, Prowler, ScoutSuite, AzureHound, ROADtools etc. - Scripting and automation skills in Python, PowerShell, Bash, Go, or C/C++. - Good understanding of OPSEC, payload handling, evasion concepts, attack path mapping, and detection-aware testing. - Strong reporting, stakeholder communication, and client-facing skills. Good to Have : - Experience with EDR/AV evasion testing in authorized environments. - Experience with malware analysis, reverse engineering, or implant customization. - Exposure to Kubernetes, Docker, and container security assessments. - Experience conducting purple team exercises and detection engineering support. - Certifications such as OSCP, OSEP, GPEN, GXPN, PNPT, eCPPT or CEH.