Redfox Security - Penetration Testing Services
Website:
redfoxsec.com
Job details:
Pentester / Red Teamer
Company: Redfox Cybersecurity
Location: Mumbai, Maharashtra, India (On-site)
Experience Required: 1–2 Years
Employment Type: Full-time
Joining: Immediate joiner preferred
About Redfox Cybersecurity
Redfox Cybersecurity is a leading global cybersecurity firm specializing in offensive security operations, threat intelligence, and advanced penetration testing services. With strategic offices in Mumbai (India), Toronto (Canada), Delaware (USA), and Abu Dhabi (Middle East), we serve Fortune 500 companies, government agencies, and enterprises across North America, Middle East, Asia-Pacific, and beyond.
Our team of elite security professionals is dedicated to protecting organizations against evolving cyber threats through proactive security assessments and cutting-edge offensive security methodologies.
Our global presence enables us to deliver 24/7 security services and maintain deep expertise across diverse regulatory environments, industry sectors, and threat landscapes. As we continue to expand our operations in the Asia-Pacific region, we are seeking talented individuals to join our Mumbai office and contribute to our mission of making the digital world safer.
About the Role
We are seeking a highly motivated Pentester / Red Teamer to join our offensive security team at our Mumbai office. This role offers a unique opportunity to work on diverse, high-impact projects for clients across multiple industries and geographies.
The successful candidate will be part of a collaborative environment that values technical excellence, continuous learning, and innovative approaches to security challenges.
You will work alongside seasoned security professionals from our global offices, gain exposure to complex enterprise environments, and have the opportunity to contribute to real-world security operations that make a tangible difference in our clients' security posture. This position provides exposure to international projects and the possibility of collaboration with our teams in Toronto, Delaware, and London.
Key Responsibilities
- Conduct infrastructure penetration testing across internal and external networks, servers, network devices, and enterprise infrastructure to identify vulnerabilities and security weaknesses.
- Perform vulnerability discovery, exploitation, privilege escalation, and post-exploitation activities across Windows and Linux-based infrastructure, including network services and exposed systems.
- Execute red team operations simulating advanced persistent threats (APTs) and sophisticated attack scenarios.
- Perform security assessments of on-premises and cloud-based environments.
- Identify and exploit vulnerabilities within Active Directory environments, including privilege escalation and lateral movement techniques.
- Develop detailed technical reports documenting findings, risk assessments, and actionable remediation recommendations.
- Present findings and security recommendations to clients and stakeholders.
- Collaborate with blue team and security operations teams to improve defensive capabilities.
- Coordinate with global team members across different time zones on multi-regional projects.
- Stay current with emerging threats, attack techniques, and security research.
- Contribute to the development of internal tools, methodologies, and testing frameworks.
- Participate in knowledge-sharing sessions and mentor junior team members, and create course content for Redfox Cybersecurity Academy.
- Support business development activities through technical demonstrations and proof-of-concept engagements.
Required Qualifications
- 1–2 years of demonstrated hands-on experience in application security, penetration testing, red teaming, and security reporting.
- Proficiency with industry-standard penetration testing tools and frameworks (Burp Suite, Metasploit, Cobalt Strike, BloodHound, etc.).
- Strong understanding of Active Directory security architecture, common misconfigurations, and exploitation techniques.
- In-depth knowledge of OWASP Top 10 vulnerabilities, MITRE ATT&CK framework, and attack methodologies.
- Ability to develop and execute complex multi-stage attack chains.
- Experience in vulnerability assessment, exploitation, and post-exploitation techniques.
- Strong technical writing and documentation skills with attention to detail.
- Excellent analytical, problem-solving, and critical thinking capabilities.
- Ability to work independently and as part of a distributed global team.
- Strong communication skills with the ability to explain technical concepts to non-technical audiences.
- Professional demeanor and ability to interact effectively with clients.
Optional Qualifications (Good to Have)
- Knowledge of cloud security platforms and services (AWS, Azure, Google Cloud Platform).
- Experience with container security (Docker, Kubernetes).
- Understanding of DevSecOps practices and CI/CD pipeline security.
- Familiarity with compliance frameworks (PCI-DSS, ISO 27001, GDPR, SOC 2, HIPAA).
- Published security research, technical blog posts, or conference presentations.
- Contributions to open-source security tools or frameworks.
- Experience with scripting and automation (Python, PowerShell, Bash, Ruby).
- Familiarity with wireless security, IoT security, or OT/ICS environments.
- Experience working in cross-functional or international teams.
What We Offer
- Opportunity to work with an internationally recognized cybersecurity team across four countries.
- Exposure to challenging and diverse security projects across multiple industries and geographies.
- Access to world-class training programs, certifications, and professional development opportunities.
- Collaborative work environment that encourages innovation and knowledge sharing.
- Career progression opportunities within a rapidly growing global organization.
- Potential for international assignments and cross-office collaborations.
- Professional certification sponsorship and continuous learning budget.
How to Apply
Interested candidates are requested to submit their updated curriculum vitae to hiring@redfoxsec.com with the subject line:
"Application - Pentester / Red Teamer - Mumbai"
Equal Opportunity Employer
Redfox Cybersecurity is an equal opportunity employer committed to building a diverse and inclusive workplace. We welcome applications from candidates of all backgrounds, experiences, and perspectives. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin
Click on Apply to know more.
