Senior Associate, Offensive Security

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.
Application Penetration Tester – Offensive Security Testing (Sr. Associate)
Role Responsibilities
Lead and conduct security assessments, including Web & API Penetration Testing, Network Penetration Testing, and Application Security Testing
Conduct Red Teaming and Adversary Simulation exercises using real-world attack techniques and TTPs
Perform Active Directory security assessments, including privilege escalation, lateral movement, and attack-path analysis
Conduct Cloud Security Assessments and Penetration Testing across AWS, Azure, and GCP environments
Perform Purple Team Exercises and Breach & Attack Simulation (BAS) to assess and improve security controls and detection capabilities
Conduct AI/LLM Security Testing and AI Red Teaming to identify security risks associated with emerging AI technologies
Apply offensive security techniques including EDR/AV evasion, Command & Control (C2), privilege escalation, lateral movement, and post-exploitation in authorized testing environments
Perform Application Security assessments and Code Reviews as required
Collaborate with clients across different technology environments and clearly articulate technical findings, attack scenarios, risks, and remediation recommendations
Stay current with the latest Offensive Security techniques, adversary TTPs, vulnerabilities, AI/LLM security, and emerging technologies
Lead and foster teamwork and open communication to deliver successful engagements
Supervise, mentor, and provide technical guidance to staff working on assigned engagements
Qualifications and Experience
BS in Computer Science, Engineering, Cybersecurity, or related field, or equivalent work experience
5+ years of experience in Offensive Security, Penetration Testing, Red Teaming, or related security domains
Advanced expertise in Web & API Security, including vulnerability identification and exploitation techniques
Hands-on experience with Network Penetration Testing, Active Directory attacks, privilege escalation, lateral movement, and post-exploitation
Experience with Red Teaming, Adversary Simulation, and MITRE ATT&CK-based techniques
Experience with Cloud Security Assessments across AWS, Azure, and/or GCP
Knowledge of Purple Teaming, Breach & Attack Simulation (BAS), and security control validation
Experience or understanding of EDR/AV evasion, Command & Control (C2), and post-exploitation techniques
Experience with Application Security, SAST/DAST, and Code Review is preferred
Exposure to AI/LLM Security Testing and AI Red Teaming is preferred
Proficient scripting/programming skills such as Python, PowerShell, Bash, or JavaScript
Excellent written and verbal communication skills with the ability to clearly communicate technical findings to senior management and clients
Must possess a high degree of integrity and confidentiality and adhere to company policies and security testing best practices
Preferred, but not required – relevant certifications such as OSCP, OSEP, OSWE, CRTO, CRTP, CREST, Burp Suite Certified Practitioner, or other relevant Offensive Security certifications
Shift Timing: - Rotational Shift
At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmus.com/careers/india.html.
RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Indian Armed Forces; Indian Armed Forces Veterans, and Indian Armed Forces Personnel status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.
Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please send us an email at careers@rsmus.com.