Red Team Specialist, Financial Services

Overview

Our client, a prominent financial services organisation, is building a new Red Team function in Singapore. This position suits offensive security professionals keen on navigating complex enterprise environments and influencing security growth.

Role Description

The successful candidate will engage in adversary simulation and Red Team operations that mimic advanced real-world cyberattacks, especially targeting Windows and Active Directory frameworks. Responsibilities include uncovering identity-related flaws, escalating privileges, and identifying lateral movement paths to critical infrastructure. Beyond offensive tasks, the role demands developing related infrastructure, automation tooling, evaluating defense mechanisms, and clearly conveying attack scenarios and remediation priorities to both security and technology stakeholders.

Requirements

• Extensive practical experience in Red Teaming, adversary emulation, advanced penetration testing, or relevant offensive security fields.
• Comprehensive understanding of Active Directory security components such as Kerberos, NTLM, delegation, access control lists, service accounts, certificate services, and domain trust configurations.
• Demonstrated ability to locate and exploit privilege escalation, credential harvesting, and lateral movement vectors within intricate Windows networks.
• Knowledge of offensive security utilities including but not limited to BloodHound, Rubeus, Impacket, Mimikatz, PowerView, and NetExec.
• Additional skills in scripting or programming using Python, PowerShell, C#, Go, or related languages are beneficial, alongside a mindset focused on holistic attack chains rather than isolated risks.

Application Process

Prospective candidates should submit their resumes directly. Only those shortlisted will be contacted.

Additional Information

License Number: 16S8060. Registration Number: R1988923.