RED Team Specialist

The Central Bank of Sri Lanka (CBSL) is the apex financial institution of the country, dedicated to maintaining economic and price stability and ensuring the resilience of the national financial infrastructure. CBSL is seeking a dynamic, highly skilled RED Team Specialist on a contract basis to bolster its cybersecurity defenses, conduct advanced breach and attack simulations, and perform proactive threat hunting.

Position Summary

• Position: RED Team Specialist

• Institution: Central Bank of Sri Lanka (CBSL)

• Location: Colombo 01, Sri Lanka

• Employment Type: Contract Basis (For a period of not more than three [03] years)

Key Responsibilities & Duties

1. Red Team Testing / Breach and Attack Simulation (BAS)

• Perform analysis of proactive information security incidents and advanced threat actors to enhance Detection Catalogs and Hunt missions using the MITRE ATT&CK Framework (Adversarial Tactics, Techniques, Procedures, and Common Knowledge).

2. Proactive Threat Hunting and Threat Intelligence

• Hunt for and identify threat actor groups, their techniques, tools, and processes utilizing open-source intelligence feeds and dark web intelligence.

• Collaborate with detection teams to transform attacker TTPs into low-false-positive behavioral and signature detections using Machine Learning (sequential classification, pattern matching).

• Monitor cybercrime threat reports to create Indicators of Compromise (IOCs) for Threat Hunting.

• Develop and implement a comprehensive threat hunting framework and lead proactive hunt missions across institutional networks.

• Track ransomware groups, phishing kits, and fraud campaigns on the dark web and open sources, providing timely intelligence support during security incidents.

Qualifications & Eligibility Criteria

1. Educational & Professional Qualifications (Satisfy Route A OR Route B)

• Route A: A Bachelor's or Master’s Degree in Information Security, Computer Science, Computer Engineering, or Information Technology specialized in Information Security from a UGC-recognized university.

  OR

• Route B: Holding one or more of the following professional certifications:

  • Offensive Security Certified Professional (OSCP)

  • Offensive Security Web Expert (OSWE)

  • Offensive Security Experienced Penetration Tester (OSEP)

  • Certified Ethical Hacker (CEH)

  • Certified Penetration Tester (CPT)

  • eLearn Security Certified Professional Penetration Tester (eCPPT)

  • GIAC Penetration Tester Certification (GPEN)

  • GIAC Web Application Penetration Tester (GWAPT)

2. Experience Requirements

• Minimum of four (04) years of experience in Red Team or Penetration Testing activities, including maintaining advanced operational awareness during threat emulation-based exploitation.

• Added Advantages: At least one (01) year in a leadership role (e.g., Team Lead), participation in Bug Bounty Programs, and Capture the Flag (CTF) competitions.

• Proficiency in programming/scripting languages such as .NET, Python, Bash, and PowerShell.

3. Age Limit

• Below 30 years of age as of 31.10.2026.

Remuneration & Benefits

• Negotiable salary package commensurate with qualifications and experience, with contributions to the Employees' Provident Fund (EPF) and Employees' Trust Fund (ETF).

Selection Procedure

• Shortlisted candidates fulfilling the required minimum criteria will be called for selection interviews.

How to Apply

1. Submit applications exclusively through the official CBSL career portal: https://www.cbsl.gov.lk/en/careers.

2. Upload mandatory scanned copies of educational/professional certificates and documents verifying work experience.

• Application Deadline: On or before 31.10.2026.

Director - Human Resources

Central Bank of Sri Lanka, No. 30, Janadhipathi Mawatha, Colombo 01, Sri Lanka

Inquiries: Telephone: 011-2477330 | Fax: 011-2477715