RSM

Senior Associate, Offensive Security

India · Work style not stated · Full time

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerRSM
LocationIndia
Work styleWork style not stated
Employment typeFull time
Employer posted10 Oct 2026

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.

Application Penetration Tester – Offensive Security Testing (Sr. Associate)

Role Responsibilities

Lead and conduct security assessments, including Web & API Penetration Testing, Network Penetration Testing, and Application Security Testing
Conduct Red Teaming and Adversary Simulation exercises using real-world attack techniques and TTPs
Perform Active Directory security assessments, including privilege escalation, lateral movement, and attack-path analysis
Conduct Cloud Security Assessments and Penetration Testing across AWS, Azure, and GCP environments
Perform Purple Team Exercises and Breach & Attack Simulation (BAS) to assess and improve security controls and detection capabilities
Conduct AI/LLM Security Testing and AI Red Teaming to identify security risks associated with emerging AI technologies
Apply offensive security techniques including EDR/AV evasion, Command & Control (C2), privilege escalation, lateral movement, and post-exploitation in authorized testing environments
Perform Application Security assessments and Code Reviews as required
Collaborate with clients across different technology environments and clearly articulate technical findings, attack scenarios, risks, and remediation recommendations
Stay current with the latest Offensive Security techniques, adversary TTPs, vulnerabilities, AI/LLM security, and emerging technologies
Lead and foster teamwork and open communication to deliver successful engagements
Supervise, mentor, and provide technical guidance to staff working on assigned engagements

Show full description

Qualifications and Experience

BS in Computer Science, Engineering, Cybersecurity, or related field, or equivalent work experience
5+ years of experience in Offensive Security, Penetration Testing, Red Teaming, or related security domains
Advanced expertise in Web & API Security, including vulnerability identification and exploitation techniques
Hands-on experience with Network Penetration Testing, Active Directory attacks, privilege escalation, lateral movement, and post-exploitation
Experience with Red Teaming, Adversary Simulation, and MITRE ATT&CK-based techniques
Experience with Cloud Security Assessments across AWS, Azure, and/or GCP
Knowledge of Purple Teaming, Breach & Attack Simulation (BAS), and security control validation
Experience or understanding of EDR/AV evasion, Command & Control (C2), and post-exploitation techniques
Experience with Application Security, SAST/DAST, and Code Review is preferred
Exposure to AI/LLM Security Testing and AI Red Teaming is preferred
Proficient scripting/programming skills such as Python, PowerShell, Bash, or JavaScript
Excellent written and verbal communication skills with the ability to clearly communicate technical findings to senior management and clients
Must possess a high degree of integrity and confidentiality and adhere to company policies and security testing best practices
Preferred, but not required – relevant certifications such as OSCP, OSEP, OSWE, CRTO, CRTP, CREST, Burp Suite Certified Practitioner, or other relevant Offensive Security certifications

Shift Timing: - Rotational Shift

At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmus.com/careers/india.html.

RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Indian Armed Forces; Indian Armed Forces Veterans, and Indian Armed Forces Personnel status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please send us an email at careers@rsmus.com.

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.