Thushar Kiran Reddy

About Thushar Kiran Reddy

Offensive Security Professional | Red Teaming | Adversary Simulation | Web Application Exploitation | EDR & AV EvasionI specialize in penetration testing, red teaming, and adversary simulation, with expertise validated by top-tier industry certifications: OSCP (Offensive Security Certified Professional) – Advanced exploitation and privilege escalation techniques. OSEP (Offensive Security Experienced Penetration Tester) – Bypassing modern defenses and EDR evasion. OSWE (Offensive Security Web Expert) – Advanced web application exploitation and custom attack methodologies. CRTE (Certified Red Team Expert)| CRTM (Certified Red Team Master) – Active Directory exploitation, stealthy lateral movement, and evasion techniques. While many security professionals emphasize “years of experience,” I focus on real-world adversarial techniques that security teams with 10+ years of experience often struggle to master. What I Bring to the Table: Advanced red teaming techniques, including Active Directory exploitation, Kerberoasting, and lateral movement. Expertise in payload development & evasion to bypass next-gen EDRs and AV solutions. Specialization in web exploitation (OSWE), identifying business logic flaws, authentication bypasses, and remote code execution (RCE) in enterprise applications. Red Team Simulations & Purple Teaming—blending offensive and defensive strategies to improve organizational security. Always looking for challenging opportunities in penetration testing, adversary simulation, and security consulting. Let’s connect!

Experience

1. Offensive Security Specialist

   Deloitte

   Jun 2025 — Present · Bengaluru, IN

   1) Conducting full-scope red team engagements including initial access, lateral movement, privilege escalation, and data exfiltration.2) Developing custom malware, payloads, and evasion techniques to bypass modern EDR, AV, and behavioral defenses.3) Performing phishing, social engineering, and physical security tests to assess human and procedural weaknesses.4) Mapping attack paths using MITRE ATT & CK and emulating threat actors (APT/TTPs) to test blue team readiness.5) Collaborating with purple teams and blue teams for detection engineering and improving incident response.6) Leveraging tools like Cobalt Strike, Sliver, Empire, BloodHound, Mimikatz, and custom scripts for engagements.7) Conducting post-engagement debriefs and writing detailed, actionable reports for executive and technical audiences.8) Ensuring stealth and operational security during all phases of testing to simulate advanced persistent threats (APTs).

Education

• Manipal University Jaipur

  Master of Business Administration - MBA , Business Administration, Management and Operations

• Manipal Academy of Higher Education

  Bachelor of Applied Science - BASc, Electrical and Electronics Engineering

• Bhashyam College of Education

  High School Diploma, General Studies

• Amity University

  Master of Computer Applications - MCA, Cyber security

• Bhashyam College of Education

  High School Diploma, Mathematics

• Rabindranath Tagore University

  Bachelor of computer application (Private), Computer Science