Description
About the Role:
We are looking for an Offensive Security Team Member to join our team at S&P Global in Hyderabad, Telangana. Our Offensive Security team fosters a culture of inclusiveness, teamwork, knowledge sharing, relentless learning, integrity, and fun. As a member of this team, you will conduct red team engagements to simulate advanced persistent threats and real-world attack scenarios against S&P Global's infrastructure and applications.
Responsibilities and Impact:
- Conduct red team engagements to simulate advanced persistent threats and real-world attack scenarios against S&P Global's infrastructure and applications
- Execute purple team exercises by collaborating with defensive security teams to enhance detection & prevention capabilities, incident response procedures, and cyber resiliency against threat actors that target S&P Global
- Design and conduct breach and attack simulations to identify security gaps, improve detection capabilities, and validate existing security controls
- Develop custom attack tools and methodologies to test security resilience and stay ahead of emerging threat landscapes
- Partner with development and infrastructure teams to provide actionable remediation guidance and security recommendations
What We're Looking For:
Basic Required Qualifications:
- Excellent communications skills, able to effectively translate technical concepts to non-technical individuals
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent work experience
- 5+ years of hands-on experience in offensive security, purple teaming, or red team operations
- Proficiency with Red Teaming frameworks and tools, both commercial and open-source
- Strong knowledge of core concepts such as network protocols, operating systems (Windows, Linux, Mac), Entra/AD, cloud platforms (AWS, Azure, or GCP and associated services), databases, middleware, email, and web applications
- Experience with scripting and programming languages such as Python, PowerShell, Bash, JavaScript, or similar for automation and tool development
- Experience with leveraging Artificial Intelligence through all phases of the attack chain
- Familiarity with Cyber Threat Intelligence, Threat Actors, and emulating their Tactics, Techniques, and Procedures (TTPs) as well as solid knowledge of the MITRE ATT&CK framework
- Relevant security certifications such as GIAC RTP, RTO, OSCP, GPEN, or equivalent industry-recognized credentials
- A strong desire for continuous learning and a tenacious attitude
- Demonstrated ability to manage responsibilities independently while contributing positively to cross-functional team objectives
Additional Preferred Qualifications:
- Experience with SIEM technologies, Identity & Access Management systems, and defensive security platforms (EDR, Next-Gen Firewalls, IDS/IPS, WAF, proxies, CDR) including associated bypass and evasion techniques
- Knowledge of DevSecOps practices and experience integrating security testing into CI/CD pipelines
What's In It For You?
- Health & Wellness: Health care coverage designed for the mind and body
- Flexible Downtime: Generous time off helps keep you energized for your time on
- Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills
- Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs
- Family Friendly Perks: It's not just about you. S&P Global has perks for your partners and little ones, too, with some best-in-class benefits for families
- Beyond the Basics: From retail discounts to referral incentive awards,small perks can make a big difference