NexTbil Tech
NexTbil Tech
NexTbil Tech este o companie internațională de tehnologie care dezvoltă platforme iGaming și produse digitale de înaltă performanță. Activitatea sa de inginerie acoperă software și servicii scalabile în domenii precum DevOps, analiza datelor, inteligența artificială și dezvoltarea blockchain, folosind tehnologiile Solidity și EVM. Compania lucrează prin metode agile și echipe multifuncționale, punând accent pe dezvoltarea talentelor tehnice și pe crearea de oportunități pentru ingineri și profesioniști din domeniul produselor într-un mediu de recrutare la distanță, cu orientare globală.

Breach Simulation Analyst (Hybrid, Hyderabad)

Conduct red team engagements and breach simulations for Provido, a secure digital solutions provider. Assess detection coverage and provide prioritized guidance to address security gaps.

Descriere

  • Plan, scope, and conduct red team engagements, penetration tests, and breach simulation exercises
  • Assess networks, web and mobile applications, cloud environments, endpoints, Active Directory, and internal infrastructure
  • Model adversary tactics, techniques, and procedures based on the MITRE ATT&CK framework
  • Evaluate SOC and incident response detection and response capabilities
  • Perform authorized phishing, vishing, and, when included in scope, physical intrusion tests
  • Create and maintain custom tools, scripts, and payloads for offensive security operations
  • Discover, exploit, and document vulnerabilities, misconfigurations, and control weaknesses
  • Prepare technical findings and executive-level reports with prioritized remediation recommendations
  • Partner with blue teams, detection engineers, and incident response teams during purple team exercises
  • Keep engagement scope, methods, evidence, exploitation procedures, escalations, and remediation records up to date
  • Track emerging offensive techniques, threat actor TTPs, vulnerability disclosures, and relevant tools

Cerințe

  • Bachelor’s degree or completed studies in cybersecurity, information technology, computer science, or a related technical field
  • At least four years of practical experience in penetration testing, red teaming, breach simulation, offensive security, or a comparable technical role
  • Practical knowledge of attack methods across networks, web applications, Active Directory, AWS, Azure or GCP, and endpoint environments
  • Understanding of privilege escalation, lateral movement, and post-exploitation techniques
  • Hands-on experience with Cobalt Strike, Metasploit, Burp Suite, BloodHound, Impacket, Nmap, or comparable frameworks
  • Scripting or programming skills in Python, PowerShell, Bash, or a similar language
  • Ability to define engagement scope and document findings with clarity
  • Ability to convert technical exploitation details into actionable remediation advice
  • Strong written and spoken English communication skills
  • Preferred: certifications such as OSCP, OSEP, OSWE, CRTO, CRTP, GPEN, GXPN, GWAPT, CEH Practical, or an equivalent credential
  • Preferred: experience with red team operations, purple team exercises, adversary emulation, breach and attack simulation programs, or managed offensive security services
  • Preferred: familiarity with AttackIQ, SafeBreach, Cymulate, command-and-control frameworks, and EDR or antivirus evasion techniques
  • Preferred: knowledge of Kerberos abuse, MITRE ATT&CK, the cyber kill chain, threat actor emulation, purple team practices, compliance-focused environments, and audit support

Beneficii

  • Competitive salary package with performance-based bonuses
  • Flexible work arrangements, including remote and hybrid options
  • Comprehensive health insurance coverage
  • Wellness programs and resources supporting physical and mental health
  • Ongoing development through training programs
  • Mentorship opportunities
  • Clearly established career progression paths
  • Supportive, inclusive, and growth-oriented workplace
  • Culture centered on diversity, inclusion, and collaboration
  • Regular team-building sessions and social events

Locuri de muncă similare

Peraton

Senior Hybrid Connectivity Engineer

Peraton

Designs and troubleshoots connectivity across AWS classified cloud, Kubernetes, and on-premises networks. Supports Peraton’s national security and government technology missions.

Deschide