RED Team Specialist (on Contract)

RED Team Specialist (on Contract) – Central Bank of Sri Lanka

Job Overview

The Central Bank of Sri Lanka is inviting applications for the position of RED Team Specialist (on Contract) to strengthen its cybersecurity and offensive security capabilities. This role focuses on advanced threat simulation, penetration testing, vulnerability exploitation, and adversary emulation to improve the organization’s security posture and resilience against cyber threats.

Position Details

Job Title: RED Team Specialist (Contract Basis)
Company: Central Bank of Sri Lanka
Location: Colombo District, Sri Lanka
Employment Type: Contract (Up to 3 Years)
Category: IT & Software, Security, Engineering & Technical, Government Jobs, Banking & Insurance

Company Overview

The Central Bank of Sri Lanka is the apex financial institution responsible for maintaining financial stability and overseeing the country’s banking and monetary systems. The institution plays a critical role in ensuring secure financial infrastructure and is actively strengthening its cybersecurity operations through advanced threat detection, red teaming, and security assurance programs.

Qualifications & Experience

• Citizen of Sri Lanka
• Bachelor’s or Master’s Degree in Information Security, Computer Science, Computer Engineering, Information Technology, or a related field from a UGC-recognized institution
• Minimum of 4 years of experience in Red Team operations, penetration testing, or offensive security engagements
• At least 1 year of leadership experience (Team Lead or similar role is an advantage)
• Strong experience in bug bounty programs or CTF competitions is preferred
• Professional certifications such as OSCP, OSWE, OSEP, CEH, CPT, eCPPT, GPEN, or GWAPT are highly desirable
• Age below 30 years as of 15.07.2026

Key Responsibilities

• Conduct Red Team operations including breach and attack simulations (BAS)
• Perform advanced adversary emulation using MITRE ATT&CK frameworks
• Identify vulnerabilities through penetration testing and exploit development
• Simulate real-world cyberattacks to test organizational defense mechanisms
• Conduct threat hunting and intelligence-driven offensive security assessments
• Develop and execute attack scenarios across web, network, and application layers
• Analyze security gaps and provide remediation recommendations
• Create detailed technical reports and executive summaries of findings
• Collaborate with SOC and Blue Team for continuous security improvement
• Participate in internal CTF exercises and security research activities
• Develop scripts and automation tools for security testing and exploitation

Required Skills

• Strong expertise in penetration testing and offensive security methodologies
• Proficiency in programming and scripting languages such as Python, Bash, PowerShell, or .NET
• Deep understanding of web application security, network security, and system exploitation
• Experience with vulnerability assessment and exploitation tools
• Strong knowledge of MITRE ATT&CK framework and adversary tactics
• Analytical thinking and advanced problem-solving abilities
• Ability to design and execute complex attack simulations
• Excellent communication and technical documentation skills
• Strong understanding of security research and exploit development

Salary & Benefits

• Competitive negotiable remuneration package
• EPF and ETF benefits applicable
• Opportunity to work in a highly secure national-level financial institution
• Exposure to advanced cybersecurity and offensive security environments
• Professional growth in Red Teaming and threat simulation domain
• Contract-based stability with performance-based extensions

How to Apply

Interested candidates should submit their applications through the official Central Bank of Sri Lanka careers recruitment process before the closing date.

Applicants must ensure they follow all instructions mentioned in the official recruitment guidelines and submit scanned copies of educational qualifications, certifications, and experience records as required.

Applications must be submitted on or before 15.07.2026.

Important Notes

• Only shortlisted candidates will be contacted for the selection process
• Applicants must meet all eligibility criteria at the time of application closing
• Incomplete or late applications will be rejected without notice
• Candidates must provide valid proof of qualifications and experience when requested
• Any form of canvassing will lead to immediate disqualification
• The Central Bank reserves the right to shortlist, postpone, or cancel the recruitment process without prior notice
• Selection will be based strictly on merit and relevance to the role requirements