Offensive Security Team Member

Location: Hyderabad, Telangana
Department: Security

About the Role:

We are looking for an Offensive Security Team Member to join our team at S&P Global in Hyderabad, Telangana. Our Offensive Security team fosters a culture of inclusiveness, teamwork, knowledge sharing, relentless learning, integrity, and fun. As a member of this team, you will conduct red team engagements to simulate advanced persistent threats and real-world attack scenarios against S&P Global's infrastructure and applications.

Responsibilities and Impact:

• Conduct red team engagements to simulate advanced persistent threats and real-world attack scenarios against S&P Global's infrastructure and applications
• Execute purple team exercises by collaborating with defensive security teams to enhance detection & prevention capabilities, incident response procedures, and cyber resiliency against threat actors that target S&P Global
• Design and conduct breach and attack simulations to identify security gaps, improve detection capabilities, and validate existing security controls
• Develop custom attack tools and methodologies to test security resilience and stay ahead of emerging threat landscapes
• Partner with development and infrastructure teams to provide actionable remediation guidance and security recommendations

What We're Looking For:

Basic Required Qualifications:

• Excellent communications skills, able to effectively translate technical concepts to non-technical individuals
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent work experience
• 5+ years of hands-on experience in offensive security, purple teaming, or red team operations
• Proficiency with Red Teaming frameworks and tools, both commercial and open-source
• Strong knowledge of core concepts such as network protocols, operating systems (Windows, Linux, Mac), Entra/AD, cloud platforms (AWS, Azure, or GCP and associated services), databases, middleware, email, and web applications
• Experience with scripting and programming languages such as Python, PowerShell, Bash, JavaScript, or similar for automation and tool development
• Experience with leveraging Artificial Intelligence through all phases of the attack chain
• Familiarity with Cyber Threat Intelligence, Threat Actors, and emulating their Tactics, Techniques, and Procedures (TTPs) as well as solid knowledge of the MITRE ATT&CK framework
• Relevant security certifications such as GIAC RTP, RTO, OSCP, GPEN, or equivalent industry-recognized credentials
• A strong desire for continuous learning and a tenacious attitude
• Demonstrated ability to manage responsibilities independently while contributing positively to cross-functional team objectives

Additional Preferred Qualifications:

• Experience with SIEM technologies, Identity & Access Management systems, and defensive security platforms (EDR, Next-Gen Firewalls, IDS/IPS, WAF, proxies, CDR) including associated bypass and evasion techniques
• Knowledge of DevSecOps practices and experience integrating security testing into CI/CD pipelines

What's In It For You?

• Health & Wellness: Health care coverage designed for the mind and body
• Flexible Downtime: Generous time off helps keep you energized for your time on
• Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills
• Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs
• Family Friendly Perks: It's not just about you. S&P Global has perks for your partners and little ones, too, with some best-in-class benefits for families
• Beyond the Basics: From retail discounts to referral incentive awards,small perks can make a big difference