Breach Simulation Analyst

NexTbil Tech

. Plan, scope, and execute red team engagements, penetration tests, and breach simulation exercises .

Posted 10/2/2026full-timeHyderabad • IndiaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing, red teaming, and breach simulation, with a strong ability to identify and document vulnerabilities while providing actionable remediation recommendations. Proficient in scripting and utilizing various offensive security tools to emulate adversary tactics and enhance incident response capabilities.

Highest-signal resume keywords

Penetration TestingRed Team EngagementsCobalt StrikePython ScriptingMITRE ATT&CK

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingRed TeamingBreach SimulationVulnerability AssessmentScripting in PythonActive Directory TestingCloud Security (AWS, Azure, GCP)Network Security TestingWeb Application TestingIncident Response

Soft Skills

Strong Written CommunicationStrong Verbal Communication

Tools & Technologies

Cobalt StrikeMetasploitBurp SuiteBloodHoundImpacketNmapAttackIQSafeBreachCymulate

Certifications & Qualifications

OSCPOSEPOSWECRTOCRTPGPENGXPNGWAPTCEH Practical

Industry Keywords

Adversary EmulationPurple Team ExercisesCyber Kill ChainThreat Actor EmulationCompliance-Focused Environments

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformPython

About the role

Key responsibilities & impact

Plan, scope, and execute red team engagements, penetration tests, and breach simulation exercises
Test networks, web and mobile applications, cloud environments, endpoints, Active Directory, and internal infrastructure
Emulate adversary tactics, techniques, and procedures aligned to MITRE ATT&CK
Test SOC and incident response detection and response capabilities
Conduct authorized phishing, vishing, and, where in scope, physical intrusion testing
Develop and maintain custom tooling, scripts, and payloads for offensive operations
Identify, exploit, and document vulnerabilities, misconfigurations, and control weaknesses
Produce technical findings and executive-ready reports with prioritized remediation guidance
Collaborate with blue team, detection engineering, and incident response on purple team exercises
Maintain engagement scope, methodology, evidence, exploitation steps, escalations, and remediation records
Monitor emerging offensive techniques, threat actor TTPs, vulnerability disclosures, and relevant tooling

Requirements

What you’ll need

Bachelor's degree or completed studies in Cybersecurity, Information Technology, Computer Science, or a related technical discipline
4+ years of hands-on experience in penetration testing, red teaming, breach simulation, offensive security, or a closely related technical role
Working knowledge of attack techniques across network, web application, Active Directory, cloud (AWS, Azure, or GCP), and endpoint domains
Knowledge of privilege escalation, lateral movement, and post-exploitation
Hands-on experience with Cobalt Strike, Metasploit, Burp Suite, BloodHound, Impacket, Nmap, or equivalent frameworks
Scripting or programming ability in Python, PowerShell, Bash, or similar
Ability to scope engagements and document findings clearly
Ability to translate technical exploitation into actionable remediation recommendations
Strong written and verbal English proficiency
Preferred: professional certifications such as OSCP, OSEP, OSWE, CRTO, CRTP, GPEN, GXPN, GWAPT, CEH Practical, or equivalent
Preferred: experience supporting red team operations, purple team exercises, adversary emulation, breach and attack simulation programs, or managed offensive security services
Preferred: exposure to AttackIQ, SafeBreach, Cymulate, command-and-control frameworks, and EDR/AV evasion techniques
Preferred: understanding of Kerberos abuse, MITRE ATT&CK, cyber kill chain, threat actor emulation, purple team methodology, compliance-focused environments, and audit support

Benefits

Comp & perks

Competitive salary package and performance-based bonuses
Flexible working options, including remote and hybrid working models
Comprehensive health insurance
Wellness initiatives and physical and mental well-being resources
Continuous learning through training programs
Mentorship
Clearly defined career development paths
Supportive, inclusive, and growth-focused environment
Diversity, inclusion, and collaboration culture
Regular team-building activities and social events