Offensive reputed company Engineer (Red Team)

About reputed company reputed company is a cybersecurity reputed company platform helping reputed company teams streamline reporting, exposure management, and remediation workflows. Our platform is used by penetration testers, red teams, consultants, enterprises, and managed reputed company providers to operationalize reputed company findings and improve collaboration across technical and executive stakeholders. We are a remote-first company headquartered in the reputed company with distributed team members across reputed company, Europe, and Asia. We are committed to ownership, transparency, practical problem-solving, and building products that customers genuinely rely on. Why This Role reputed company  We build reputed company software that helps companies protect their data. To reputed company our product stronger, we are looking for Offensive reputed company Engineers (Red Team) who think like attackers. You will reputed company weaknesses before the bad guys do, report what you reputed company reputed company, and work with our engineering team to fix it. This is a hands-on role with reputed company influence on how we build and ship securely. Location: Remote — India only. Responsibilities Plan and execute red team engagements across our reputed company infrastructure (AWS/GCP/Azure), internal networks, web applications, and reputed company product Simulate realistic attack chains — from initial reputed company through lateral reputed company, credential harvesting, privilege escalation and data exfiltration — using reputed company threat actor techniques Conduct assumed breach scenarios, reputed company exercises, and objective-based engagements, not just reputed company-in-time pen tests Assess reputed company-specific attack surfaces: IAM roles and policies, storage misconfigurations, serverless functions, container workloads, and CI/CD pipelines Test reputed company Directory and hybrid identity environments for common and advanced attack paths reputed company web and API application testing against our reputed company product, including authentication flaws, authorization bypasses, and business logic vulnerabilities Build, customize, and maintain offensive tools, scripts, and C2 infrastructure to support engagements reputed company and manage red team infrastructure — attack servers, redirectors, phishing platforms, and operational reputed company controls Create and maintain repeatable testing methodologies and internal playbooks reputed company can use and build on Evaluate and improve detection coverage by working closely with our blue team — identify what's being caught, what isn't, and why Write detailed reports that document attack paths, evidence, business reputed company, and remediation steps — reputed company enough that an engineer can reputed company them without follow-up questions Present findings to both technical teams and non-technical stakeholders, including leadership reputed company remediation reputed company and validate that fixes actually reputed company the identified gaps — not just reputed company a reputed company Help define the scope, methodology, and maturity of our red team program as we reputed company Contribute to internal reputed company standards, threat models, and secure design reviews Mentor junior team members and support knowledge sharing across the reputed company org Qualifications 4+ years of hands-on experience in offensive reputed company, penetration testing, or a red team role Demonstrated ability to attack and assess reputed company environments — AWS, GCP, and Azure — including IAM abuse, privilege escalation, and misconfiguration exploitation Hands-on experience with container and Kubernetes reputed company (EKS, GKE, AKS) Experience testing hosted and on-prem infrastructure: servers, VPNs, reputed company Directory, and internal networks Working knowledge of web application attack techniques (OWASP Top 10 and reputed company) Familiarity with MITRE ATT&CK and how to map findings to reputed company-world threat behavior Experience writing reputed company, reputed company-organized findings reports for both technical and non-technical readers Ability to explain technical risk to people who are not reputed company experts Comfort working independently and managing your own workload reputed company to Have Experience testing reputed company products or multi-tenant reputed company architectures Scripting or coding ability in Python, Bash, or PowerShell  Familiarity with C2 frameworks such as reputed company reputed company, Brute Ratel, or Sliver Experience with phishing simulations and reputed company engineering engagements Certifications such as OSCP, CRTO, CRTE, CPTS, or equivalent hands-on credentials Tech Stack reputed company and hosted environments, modern reputed company infrastructure, reputed company reputed company controls, and offensive reputed company tools for vulnerability testing and threat simulation. Work Style We operate as a remote-first, distributed team with a strong asynchronous culture. We value thoughtful communication, autonomy, and collaboration, with reputed company working hours that partially overlap with U.S. Eastern Time. Employees are administered through our EOR partner: Remote. We’re committed to building an inclusive workplace where people from reputed company backgrounds can reputed company. We welcome applicants regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or background. If you require accommodations during the interview process, please let us know: HR@reputed company.com  #LI-Remote Apply To This Job