Sr. SOC Engineer (Red Teaming & Web Application Security Specialist)

Role Overview: You will be working as a Red Teaming & Web Application Security Specialist at Hitachi Digital in Noida. Your primary responsibility will be to conduct advanced offensive security assessments to identify vulnerabilities across applications, infrastructure, and processes. This role will involve blending adversary simulation (Red Team) exercises with deep web application penetration testing to proactively uncover and remediate security weaknesses before they can be exploited by malicious actors. Key Responsibilities: - Plan, execute, and document red team engagements simulating realistic cyberattacks against the organization's systems, applications, and users. - Emulate threat actors" tactics, techniques, and procedures (TTPs) based on frameworks like MITRE ATT&CK. - Conduct physical security assessments, social engineering campaigns (phishing, vishing), and insider threat simulations as required. - Collaborate with the Blue Team to validate detection and response capabilities, providing actionable improvement plans. - Perform manual and automated web application penetration testing using tools like Burp Suite, OWASP ZAP, and custom scripts. - Identify, validate, and exploit vulnerabilities such as injection flaws, authentication bypass, XSS, CSRF, SSRF, and insecure deserialization. - Work with development teams to remediate findings and ensure secure coding practices. - Conduct source code reviews to detect and eliminate security flaws. - Develop and maintain custom tools, scripts, and exploits to enhance testing capabilities. - Stay current with emerging attack vectors, zero-days, and security trends. - Perform threat modeling and provide secure architecture recommendations. Qualification Required: - 7 years of experience in Web security and red teaming. Additional Details of the Company: Hitachi Digital is a company at the forefront of digital transformation and the fastest growing division of Hitachi Group. They offer comprehensive services that span the entire digital lifecycle, integrating domain knowledge and digital capabilities to accelerate synergy creation and make a real-world impact for customers and society as a whole. As part of the Global Cyber team, you will join passionate advocates of information security who continuously seek new and better ways to enhance practices and strive for excellence in cybersecurity operations.,