Lead – Red Team (ISG)
Business Unit (PA): Information Security Group
Team: ISG
Reports to: Head – Red Team & Bug Bounty
Location: Airoli
Job Function: Red Team & Bug Bounty
Role Type: Supervisory
Direct Reports: 4–5
Travel: Moderate
Band: D2–D3
Version: 1.0
Job Purpose
Build and lead the Bank’s AI Red Team and develop an agentic offensive‑security platform capable of simulating real attack scenarios on AI and traditional systems. Conduct adversarial campaigns, identify security vulnerabilities using latest TTPs, strengthen detection/defense posture, mentor team members, and collaborate closely with wider security units to uplift enterprise cyber resilience.
Key Responsibilities
Red Team Operations & Governance
Build and lead the AI Red Team from scratch.
Establish AI security testing practice aligned to MITRE ATT&CK, MITRE ATLAS, OWASP, OSSTMM frameworks.
Develop autonomous agentic systems to execute adversarial attacks on AI and traditional tech ecosystems.
Plan attack campaign chains; guide team members through operations and program governance.
Track latest attacks; mentor juniors; conduct adversarial campaign simulations across AI + traditional systems.
Prepare deep‑dive technical reports and executive‑level presentations for senior stakeholders.
Qualifications & Experience
Graduate/Post‑Graduate in Engineering / IT / Cybersecurity or related fields.
18+ years hands‑on experience in Development, Offensive Security, Red Teaming, Pen‑Testing, AppSec, AI/ML Security.
Proven expertise designing/running adversarial attack simulations.
Experience with AI security, adversarial ML, LLM vulnerabilities, agentic AI architectures.
Should have led Red Team practice in mid‑to‑large organizations.
Key Skills
Penetration testing (web, network, mobile); strong manual + tool‑based exploitation capability.
Vulnerability assessment expertise; ability to identify latent weaknesses.
Knowledge of OWASP, NIST, MITRE ATT&CK best practices.
Threat‑intelligence analysis & tracking emerging TTPs.
Leadership & mentoring skills; team collaboration.
Strong analytical & problem‑solving mindset; creative adversarial thinking.
Ability to manage multiple Red Team engagements and stakeholder expectations.
Major Stakeholders
Internal Audit
BTG
IT Teams (IT TS & SD, BSG, IT Governance, etc.)
Relevant business units
Refer to the Job Description
Eligibility typically includes the qualifications and experience outlined in the job description above, with around 0 - 1 Years years of relevant experience expected for this role.
The key responsibilities for this role are detailed in the Key Responsibilities section above, covering the core duties expected of a Tech & Digital-Sr Database Engineer at HDFC Bank.
This role requires around 0 - 1 Years years of relevant experience, as specified in the job listing. Please refer to the Qualifications & Experience section above for full details.
Skills relevant to this position are outlined in the Qualifications & Experience section above. In general, strong communication, domain knowledge, and the ability to meet role-specific targets are valued across similar BFSI positions.
You can apply directly using the Apply Now button on this page, which will take you to HDFC Bank's application process for this role.