Chief Information Security Officer (CISO)

WE ARE HIRING :Chief Information Security Officer (CISO)

Role Overview

We are seeking a highly skilled cybersecurity professional to join our team as a Chief Information Security Officer (CISO). This role involves conducting advanced red team testing, adversary emulation, and proactive threat hunting activities to strengthen the organizations cybersecurity posture. You will also be responsible for analyzing emerging threats, conducting intelligence-led operations, and providing actionable insights to leadership.

Key Responsibilities:

• Perform red team testing and breach & attack simulations using the MITRE ATT&CK framework.
• Conduct proactive threat hunting and identify attacker TTPs (Tactics, Techniques, and Procedures).
• Work with detection teams to transform TTPs into low false-positive detections using behavioral and ML-driven techniques.
• Monitor cybercrime threat reports and generate IOCs (Indicators of Compromise) for threat hunting.
• Track ransomware groups, phishing kits, and fraud campaigns on the dark web and open sources.
• Develop and implement a comprehensive threat hunting framework.
• Conduct in-depth threat actor analysis, providing regular reports, alerts, and risk assessments.
• Support incident response teams during security incidents with intelligence and guidance on containment.
• Document findings, recommendations, and investigation results clearly for stakeholders.
• Enhance internal VAPT and red team capabilities through scripting, automation, and research of latest TTPs.
• Participate in Capture-The-Flag (CTF) activities, internally and externally.

Requirements:

Education & Certifications

• Bachelors or Masters degree in Information Security, Computer Science, Computer Engineering, or IT (specialized in Information Security).
• Offensive certifications such as OSCP, OSWE, OSEP are preferred.

Experience

• Minimum 6 years experience in red team/penetration testing and adversary emulation.
• At least 1 year of experience in a team leadership role is an advantage.
• Proven expertise in bypassing endpoint/network security controls, using C2 frameworks (Cobalt Strike, Metasploit), and leveraging offensive tools.
• Hands-on experience in exploit development, lateral movement, and persistence across Windows/Linux systems.
• Proficiency in vulnerability assessments, penetration testing, and adversary emulation exercises.
• Strong OSINT collection and analysis skills.

Preferred Skills & Competencies

• Ability to automate processes and develop scripts to enhance VAPT and red team operations.
• Strong problem-solving skills under tight deadlines and the ability to think outside the box.
• Excellent analytical skills with capability to break down complex problems.
• Experience in code auditing and exploit writing is an added advantage.

Other Details:

• Contract Type: Up to 3 years.
• Age Limit: Below 32 years as at 30.09.2025.
• Remuneration: Negotiable.
• Recruitment Method: Interviews.

Ready to take your career to new heights?

We're InTalent Asia, your go-to recruitment partner in Sri Lanka, and we've got an exciting opportunity for you! Our client is looking for a dynamic individual to fill the role of Red Teaming, Adversary Emulation & Threat Intelligence Expert (On Contract).

At InTalent Asia, we're not just recruiters; we're here to architect your career success. Join us in the journey of matching your skills with unparalleled opportunities.

Apply now and see how you can be the perfect fit for this exclusive position!

#InTalentAsia #CareerOpportunity #JobVacancy #ElevateYourCareer