Offensive Security Specialist

Job Description

The Offensive Security Specialist executes a range of workstreams in delivering offensive security governance, contributing to planning, test scoping, and engagements with project teams and external testing teams to ensure Entain India security capabilities withhold amidst a rapidly evolving cyber threat landscape.

• Develop, implement, and maintain security testing strategies, roadmaps, policies, processes, technologies, and controls.
• Mentor Security Testing professionals and act as a technical resource.
• Champion and share knowledge of emerging trends and changes in security testing.
• Develop Red Teaming, Penetration Testing, Code Scanning, and Vulnerability Management policies and procedures.
• Validate security controls and incident response through offensive security operations.
• Enhance security and penetration testing techniques across projects.
• Execute threat intelligence-informed Red and Purple Team operations.
• Identify and communicate security findings and strategies to technical stakeholders and legal counsel.
• Define and execute penetration testing scopes aligned with certification and compliance requirements.
• Identify gaps and improvement areas in penetration testing, vulnerability remediation, and threat mitigation.
• Conduct threat, vulnerability, and risk analysis and provide mitigation and remediation guidance.
• Assess inherent and residual risks and communicate results effectively.

Qualifications

• Minimum 7 years of experience in a similar Information Security role.
• Experience in Vulnerability Management and Exposure Management.
• Experience in Penetration Testing of Web Applications, APIs, Cloud, and Infrastructure.
• Experience in Red Team Operations and Adversary Emulation.
• Experience in Purple Team Exercises and Security Control Validation.
• Experience in Risk Management and Threat Modelling.
• Experience in AI/LLM Security Testing.
• Experience in vulnerability research, exploit validation, and PoC development.
• Experience developing offensive security tools, automation, or open-source projects.
• Experience participating in bug bounty programs or responsible disclosure initiatives.
• Strong knowledge of Networking (TCP/IP), Linux, Windows, Active Directory/Entra ID, Web Technologies, and Cloud Platforms (AWS, Azure, GCP).
• Proficiency in Python, PowerShell, or equivalent scripting languages.
• Excellent communication and stakeholder engagement skills.
• OSCP, OSEP, OSWE, CRTO, CRTP, GPEN, GXPN, CISSP, or equivalent certifications.
• Experience conducting intelligence-led Red Team operations.
• Strong knowledge of MITRE ATT&CK and threat-informed defence.
• Experience integrating systems and security tooling through APIs.
• Experience in Online Gaming Security.
• Experience in Application Security.
• Experience conducting Cloud Security Assessments.
• Knowledge of regulatory frameworks, including PCI-DSS and ISO 27001.

Additional Information

At Entain India, we offer a strong package and the support people need to make an impact. Join us, and a great compensation package is just the beginning. You can expect to receive benefits like:

• Safe home pickup and home drop.
• A regular bonus and great pension.
• 24 days annual leave.
• Extra paid leave, including wellbeing and development days.
• Life assurance and Income Protection.
• Private healthcare and wellbeing support.
• INR 3,000 per month Communication allowance.
• Up to INR 16,000 per year in Crèche expenses (children under 3).

Equal Opportunities.

If you need any reasonable adjustments at any stage of the recruitment process, please contact us and we'll support you.

We're committed to creating a diverse, equitable and inclusive workplace where everyone feels valued, respected and able to be themselves.

We're an equal opportunities employer. We welcome applications from everyone and we do not discriminate based on age, disability, gender or gender reassignment, pregnancy or maternity, race, religion or belief, sexual orientation, marriage/civil partnership, or any other basis.

We comply with all applicable recruitment regulations and employment laws in the jurisdictions where we operate, ensuring ethical and compliant hiring practices globally.