HDB Financial Services - Senior Manager - Information Security & Governance

HDB Financial Services Ltd is looking for an experienced Red Team Assessment expert to join our Cyber Security Team.

This role is responsible for simulating real-world attacks to test the effectiveness of our security controls, detection capabilities, and incident response processes.

The ideal candidate will have a strong background in offensive security, a deep understanding of adversary tactics, and the ability to provide actionable insights to strengthen our overall security posture.

Technical Configuration Audit Based Assessment role to strengthen our IT and Cyber Security Posture.

The role is responsible for reviewing assessing and auditing systems, network and security configuration to ensure compliance with internal policies, regulatory requirement and industry best practices.

This role will play a key role in identifying misconfiguration, recommending corrective measures and ensuing that IT and Cyber Security solution are implemented securely and effectively.

Key Responsibilities :

Red Team Assessment :

• Conduct red team exercises to mimic sophisticated cyberattacks and evaluate the effectiveness of security controls.
• Develop and execute complex attack scenarios using tactics, techniques, and procedures (TTPs) aligned with real-world threat actors.
• Perform internal Red Team Assessment across networks, applications, endpoints, and cloud environments.
• Develop and deploy custom attack tools and payloads (e., backdoors, phishing kits, webshells).
• Use frameworks like MITRE ATT&CK to guide threat simulation strategies.
• Emulate advanced persistent threat (APTs) using industry-recognized tactics, techniques and procedure (TTPs).
• Document attack paths, vulnerabilities exploited, and lateral movement techniques, including attack scenarios, vulnerabilities, and recommendations for remediation.
• Develop custom scripts, tools and methodologies.
• Hand-on experience with Active Directory attacks, exploitation frameworks and scripting (Python, PowerShell, Bash etc.
• Assist SOC team to simulate the SOC Use Case.
• Assist internal team for Breach Attack Simulation scan and improve overall BAS posture.
• Identify and exploit vulnerabilities across infrastructure, applications, cloud environment and physical security.
• Provide detailed reports with remediation strategies and executive summaries.
• Collaboration with Blue Teams Work closely with defensive teams to share insights, improve detection capabilities, and strengthen incident response.
• Track remediation efforts and perform follow-up to confirm closure of reported findings.

Configuration Audit Based Assessment :

Mandatory Skills Required :

Preferred Traits :

(ref : hirist.tech)