IND Associate Software Engineer - Red Team Engineer

Overview

Support adversary simulation exercises and targeted testing mapped to MITRE ATT&CK, working alongside senior Red Team operators and security engineering partners to identify risk and help improve defenses.

What you'll do

• Assist in planning and execution of approved adversary simulation exercises across endpoints, identity, applications, cloud, and third-party integrations, with guidance from senior operators.
• Operate across initial access simulation, internal discovery, credential access testing, privilege escalation, lateral movement, command-and-control simulation, and objective-based actions within approved scope.
• Map procedures and findings to MITRE ATT&CK to keep tradecraft, reporting, and scenario design consistent across exercises.
• Collect command output, screenshots, logs, timelines, access paths, affected assets, and constraints so findings are defensible and reproducible.
• Help maintain lab environments, test infrastructure, and approved tooling while following established safety and OPSEC practices.
• Contribute to team standards, document lessons learned, and participate in peer reviews of techniques, findings, and reports.
• Use LLMs to support authorized offensive security operations, including research, scripting, analysis, tooling, and workflow automation, and evaluate LLM-enabled systems for weaknesses that could contribute to an attack path.
• Operate within defined scope, approvals, deconfliction steps, and engagement rules for all activities.

What you'll need

• 1 to 3 years in offensive security, penetration testing, Red Team operations, adversary simulation, or hands-on security engineering with offensive testing exposure.
• Solid working knowledge of Windows and Linux internals, cloud security, AI/LLM, common enterprise attack paths, and at least one major cloud platform such as AWS, Azure, or GCP.
• Practical familiarity with MITRE ATT&CK, including the ability to map and demonstrate Red Team procedures against tactics, techniques, objectives, and enterprise risk.
• Practical experience writing or modifying scripts in PowerShell, Python, Go, Rust, or C#, with enough depth to automate operator tasks, adapt approved tooling, handle output, and troubleshoot execution issues.
• Ability to think through attack paths, adjust safely when assumptions fail, maintain discipline under scope constraints, and document what worked, what failed, and why.
• Clear technical writing, disciplined evidence handling, and the ability to explain attack paths, impact, and remediation context to technical audiences without overstating findings.
• Experience planning and managing test execution across a range of automated security testing tools, validating results, tracking coverage, and delivering clear, actionable reports.

Nice to have

• OSCP, CRTO/CRTP, or similar hands-on security certifications.

Details

• Location: India GCC, Puppalaguda Village.