Senior Cybersecurity Offensive Security Engineer

Key Responsibilities

• Penetration Testing & VA: Conduct Penetration Testing & Vulnerability Assessments across Applications, APIs, Mobile, Networks, and Infrastructure.
• Web Security: Perform Web Application Security Testing in accordance with the OWASP Methodology.
• Red & Purple Teaming: Conduct Red Team / Purple Team exercises and simulate real-world cyberattacks to evaluate the readiness of defense systems.
• Risk & Remediation: Analyze vulnerabilities, assess security risks, and provide remediation guidelines.
• Threat Modeling & Review: Perform Threat Modeling, Security Assessments, and Architecture/Security Reviews.
• Secure Coding: Support Application Security initiatives, promote Secure Coding practices, and conduct Code Reviews.
• DevSecOps: Integrate security testing tools and processes into CI/CD pipelines and DevSecOps workflows.
• Security Automation: Develop custom scripts and tools to automate security testing processes.
• Reporting & Stakeholders: Prepare comprehensive technical reports and present findings to both technical teams and business stakeholders.
• Cross-Team Collaboration: Partner with the Blue Team, Infrastructure, and Development teams to improve and harden overall security controls.
• Incident Response & Intel: Support Incident Response efforts and continuously track emerging cyber threats and advanced attack techniques.

---

Qualifications

• Education: Bachelor's Degree or higher in Computer Science, Computer Engineering, IT, Cybersecurity, or a related field.
• Experience: 3–5+ years of experience in Penetration Testing, Offensive Security, Application Security, or Vulnerability Assessment.
• Technical Knowledge: Strong understanding of Network Security, Web/Mobile/API Security, and Ethical Hacking concepts.
• Security Tools: Proven experience using tools such as Burp Suite, Nmap, Nessus, Metasploit, OWASP ZAP, and Kali Linux.
• Scripting/Programming: Ability to write scripts or program in languages such as Python, PHP, or Node.js.
• Analytical Mindset: Strong analytical skills with the ability to think from an attacker’s perspective.
• Communication: Excellent communication and presentation skills, with the ability to explain technical findings to both technical and non-technical stakeholders.
• Interpersonal Skills: Ability to work effectively in a team environment and handle pressure well.
• Language Proficiency: Good command of spoken and written English.

---

Certifications Required

• OSCP
• GPEN
• CompTIA PenTest+
• BSCP

Preferred Experience

Special consideration will be given to candidates with experience in:

• Red Team / Purple Team operations
• Web / Mobile / API Penetration Testing
• Cloud Security
• DevSecOps / CI/CD Security
• Source Code Review
• Threat Modeling
• Vulnerability Management
• Security Automation

Ideal Candidate Profile

The ideal candidate must be capable of managing the entire security assessment lifecycle end-to-end: Identify Vulnerability → Exploit & Validate → Assess Risk → Recommend Remediation → Retest → Improve Security Controls. They will serve as the core Offensive Security / Penetration Testing specialist, driving security excellence across both the Cybersecurity and Technology teams within the organization.

---