Penetration Testing & Red Teaming SME (Data Privacy)

About the role

This position focuses on advanced penetration testing and red‑team activities targeting data‑privacy‑sensitive assets. The role is offshore for a one‑year contract with the possibility of extension.

Key responsibilities

• Perform application and infrastructure penetration testing on personal data repositories, ERP and CRM systems.
• Assess cloud storage platforms that host regulated datasets, including data pipelines, APIs and transfer workflows.
• Execute DLP bypass attempts and evasion techniques, and validate detection through SOC/XDR integrations.
• Conduct periodic, targeted red‑team exercises on privacy‑related assets and simulate lateral movement to high‑value data stores.
• Run vulnerability scans on databases, data warehouses and high‑sensitivity applications.
• Review configurations of data stores and DLP‑integrated assets to identify privacy‑impacting misconfigurations.
• Support remediation validation, re‑testing, and verification of privacy controls.
• Validate the effectiveness of existing privacy and DLP controls under real‑world attack scenarios.

Required profile

• Provide expected salary expectations.
• State current notice period.
• Indicate current location and visa or work‑permit status.

Required skills

• Penetration testing of applications and infrastructure.
• Red‑team operations focused on data‑privacy assets.
• Vulnerability scanning for databases and high‑sensitivity systems.
• Knowledge of DLP bypass techniques and evasion methods.
• Experience with SOC/XDR integration and detection validation.
• Configuration review of data stores and privacy‑impacting settings.