offensive security engineer

Octdaily

<div>
 
 Role Overview
 
 
 We are seeking a Mid&ndash;Senior Offensive Security Engineer with hands-on expertise in vulnerability assessment, penetration testing, red teaming, and Azure environment security assessments. The candidate should possess strong technical experience in web, API, and mobile application security, and be able to assess configurations based on CIS controls, NIST, and other industry standards.
 
 
 
 
 
 Key Responsibilities
 
 
 &bull; Perform comprehensive VAPT across web, API, and mobile applications.
 
 
 &bull; Conduct red team operations and adversarial simulations to assess defense posture.
 
 
 &bull; Perform Azure WAF and cloud environment configuration reviews and recommend hardening measures.
 
 
 &bull; Evaluate environments against CIS Controls, NIST, and internal baselines.
 
 
 &bull; Collaborate with DevSecOps and cloud engineering teams to support secure design and remediation.
 
 
 &bull; Assist with automation of security testing and vulnerability management workflows.
 
 
 
 
 
 Required Experience &amp; Skills
 
 
 &bull; 5&ndash;8 years of hands-on experience in offensive security or penetration testing roles.
 
 
 &bull; Expertise in web, API, and mobile application testing (Burp Suite, OWASP ZAP, Postman, MobSF, Frida).
 
 
 &bull; Strong understanding of OWASP Top 10, CWE, MITRE ATT&amp;CK, and exploitation methodologies.
 
 
 &bull; Experience in Azure security (WAF, Key Vault, App Services, Azure AD).
 
 
 &bull; Proficiency in scripting languages such as Python, PowerShell, or Bash.
 
 
 &bull; Knowledge of CIS Benchmarks and common cloud misconfigurations.
 
 
 
 
 
 Preferred Skills / Certifications
 
 
 &bull; Certifications: OSCP, OSWE, CRTP, OSEP, AZ-500, or CREST CRT.
 
 
 &bull; Familiarity with SIEM/EDR evasion and threat simulation techniques.
 
</div>

Offensive Security Engineer

Deloitte

<div>
 
 Connect to your career at Deloitte
 
 
 
 
 Deloitte
 
 , established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity.
 
 
 
 At Deloitte, you will make a real impact by working on diverse projects and collaborating with experts to deliver innovative solutions. As an
 
 Offensive Security Senior Engineer
 
 , you will focus on adversary emulation and red teaming to simulate advanced persistent threats (APTs) and cyberattacks. Using frameworks like MITRE ATT&amp;CK, you will test the resilience of our security controls and incident response capabilities. Additionally, you will conduct penetration testing on web applications, mobile apps, APIs, and networks, using scripting, defense evasion techniques, and code review to identify and exploit vulnerabilities.
 
 
 
 Your Role Might Include All The Following
 
 
 
 
 Red Teaming and Penetration Testing
 
 
 
 <ul>
 <li>
 Lead red team engagements to emulate the TTPs of advanced adversaries, using frameworks like MITRE ATT&amp;CK and Caldera to simulate real-world attack scenarios.
 </li>
 <li>
 Design and execute complex attack chains, including initial access, privilege escalation, lateral movement, data exfiltration, and persistence, to test the effectiveness of security controls.
 </li>
 <li>
 Simulate sophisticated threats such as nation-state actors, ransomware groups, and insider threats to identify gaps in detection and response processes.
 </li>
 <li>
 Conduct penetration testing across web applications, networks, cloud environments, and internal systems to identify vulnerabilities and validate red team findings.
 </li>
 <li>
 Test for vulnerabilities in web applications (e.g., SQL injection, XSS, CSRF, IDOR, OWASP Top 10), mobile apps (iOS and Android), and APIs (REST, GraphQL, SOAP).
 </li>
 <li>
 Use tools like Burp Suite, OWASP ZAP, Frida, and MobSF to identify and exploit vulnerabilities in diverse attack surfaces.
 
 
 </li>
 </ul>
 
 Web Application Security
 
 
 
 <ul>
 <li>
 Conduct in-depth penetration testing of web applications to identify vulnerabilities such as SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), insecure direct object references (IDOR), and other OWASP Top 10 issues.
 </li>
 <li>
 Test for business logic flaws, session management issues, and authentication/authorization vulnerabilities in web applications.
 </li>
 <li>
 Use tools like Burp Suite, OWASP ZAP, and manual techniques to identify and exploit web application vulnerabilities.
 
 
 </li>
 </ul>
 
 Scripting and Automation
 
 
 
 <ul>
 <li>
 Write and maintain custom scripts (e.g., in Python, PowerShell, Bash, or JavaScript) to automate attack techniques, payloads, and reconnaissance processes for web, mobile, and API testing.
 </li>
 <li>
 Build tools to streamline pentesting workflows, such as automated vulnerability scanning, exploitation, and post-exploitation activities.
 </li>
 <li>
 Create scripts to bypass web application firewalls (WAFs), evade detection, and test the resilience of blue team defenses.
 
 
 </li>
 </ul>
 
 Defense Evasion Techniques
 
 
 
 <ul>
 <li>
 Research and implement advanced defense evasion techniques to bypass endpoint detection and response (EDR), antivirus, WAFs, and other security solutions.
 </li>
 <li>
 Develop obfuscation methods for payloads and exploits to avoid detection by SIEM, IDS/IPS, and other monitoring tools.
 </li>
 <li>
 Stay updated on the latest evasion techniques and adapt strategies to simulate sophisticated adversaries targeting web applications and other systems.
 
 
 </li>
 </ul>
 
 Code Review &amp; Secure Development
 
 
 
 <ul>
 <li>
 Perform thorough code reviews to identify vulnerabilities in web applications, APIs, and mobile apps, focusing on languages such as Java, JavaScript, Python, PHP, or C#.
 </li>
 <li>
 Identify insecure coding practices, such as improper input validation, lack of output encoding, and insecure API integrations.
 </li>
 <li>
 Collaborate with development teams to provide actionable recommendations for secure coding practices and remediation of identified vulnerabilities.
 
 
 </li>
 </ul>
 
 Mobile and API Security
 
 
 
 <ul>
 <li>
 Perform penetration testing on mobile applications (iOS and Android) to identify vulnerabilities such as insecure storage, improper session handling, and weak authentication mechanisms.
 </li>
 <li>
 Assess API security (REST, GraphQL, SOAP) for issues like broken authentication, excessive data exposure, and lack of rate limiting.
 </li>
 <li>
 Use tools like Burp Suite, Frida, and MobSF to analyze mobile and API attack surfaces and develop exploits for identified vulnerabilities.
 
 
 </li>
 </ul>
 
 Connect To Your Skills And Professional Experience
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, information technology, computer science, or a relevant degree.
 </li>
 <li>
 Minimum 3 to 7 years of hands-on experience in penetration testing, red teaming, or related offensive security roles.
 </li>
 <li>
 Analytical capabilities, critical thinking, and problem-solving mindset (ability to analyze complex data and information to identify key insights and trends).
 </li>
 <li>
 Proficient in English speaking and writing.
 </li>
 <li>
 Flexibility for travel and working hours.
 </li>
 <li>
 strong proficiency in web application pentesting tools such as Burp Suite, OWASP ZAP, and manual testing techniques.
 </li>
 <li>
 Proficiency in scripting languages such as Python, PowerShell, Bash, or JavaScript for automation and tool development.
 </li>
 <li>
 Deep understanding of defense evasion techniques, including bypassing WAFs, EDR, and AV solutions.
 </li>
 <li>
 Expertise in code review for identifying vulnerabilities in web applications, APIs, and mobile apps.
 </li>
 <li>
 Strong knowledge of mobile security testing tools (e.g., Frida, MobSF, Drozer) and API testing tools (e.g., Postman, Burp Suite).
 </li>
 <li>
 Familiarity with common pentesting tools like Metasploit, Nmap, Cobalt Strike, BloodHound, and Kali Linux.
 </li>
 <li>
 Understanding of cloud environments (AWS, Azure, GCP) and their associated attack vectors.
 
 
 </li>
 </ul>
 
 The Following Attributes Are Also Preferable
 
 
 
 <ul>
 <li>
 Relevant certifications such as OSCP, OSWE, OSEP, CRTO, CRTP, GWAPT, GXPN, or equivalent are a plus.
 </li>
 <li>
 Active participation in CTF competitions with demonstrated achievements.
 </li>
 <li>
 Experience with penetration testing of AI systems and Large Language Models (LLMs), including testing for vulnerabilities like prompt injection, data poisoning, model inversion, or adversarial attacks.
 </li>
 <li>
 Experience with adversary emulation frameworks like MITRE ATT&amp;CK or Caldera.
 </li>
 <li>
 Knowledge of secure software development lifecycle (SDLC) and DevSecOps practices.
 </li>
 <li>
 Contributions to the security community through blogs, tools, or conference talks.
 </li>
 <li>
 Familiarity with container security (Docker, Kubernetes) and serverless architectures.
 
 
 </li>
 </ul>
 
 Personal Independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect with your colleagues
 
 
 
 Location: Cairo, Egypt
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; -Dan, Technology &amp; Transformation
 
 
 &ldquo;Everyone always says, &ldquo;it&rsquo;s the people,&rdquo; and that&rsquo;s true. Working for a brand you feel proud of feels pretty good too. And you don&rsquo;t have any stress about fitting into a particular stereotype, because there are so many different types of people in Deloitte Digital.&rdquo; &ndash; Gillian, Technology &amp; Transformation
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So, we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
 
 
</div>

Deloitte Innovation Hub | Cyber Security | Offensive Security Senior Engineer, Cairo, Egypt.

Central Hudson

<div><div>Benefits:</div><div><ul><li>
Competitive compensation</li><li>
Medical, dental, and vision insurance</li><li>
401(k) retirement savings plan with substantial company match</li><li>
Life and travel insurance</li><li>
Tuition assistance</li><li>
Wellness reimbursement program</li><li>
Paid holidays and vacation</li></ul></div>
What is an Information Security Engineer - Offensive Security?
We are seeking a diligent and experienced Offensive Security Engineer to join our team. In this role, you will be working within a group of highly motivated Information Technology and Cybersecurity professionals committed to keeping Central Hudson safe. The Offensive Security Engineer is responsible for conducting intelligence‑led threat emulation and purple team exercises to simulate real‑world adversaries, validate detection and response capabilities, and identify security control gaps. This role partners closely with the SOC, threat intelligence, detection engineering, and infrastructure teams to continuously validate detections, assess control effectiveness, and drive measurable improvements across the detection‑to‑remediation lifecycle. The ideal candidate has a strong understanding of modern security principles, offensive security techniques, and attacker methodologies, along with excellent analytical skills and the ability to clearly communicate technical findings and risk to both technical and non‑technical stakeholders.
What does an Information Security Engineer - Offensive Security?
<ul><li>Conducts targeted offensive testing activities in support of threat emulation and detection validation across networks, applications, cloud environments, and endpoints</li><li>
Executes intelligence‑driven threat emulation exercises that replicate real‑world adversaries, campaigns, and tactics, techniques, and procedures (TTPs)</li><li>
Performs vulnerability remediation testing to validate the effectiveness of fixes and compensating controls</li><li>
Maps emulated activity to MITRE ATT&amp;CK techniques and track detection coverage and gaps</li><li>
Develops and maintains custom tools, scripts, and payloads to support testing activities</li><li>
Safely exercises adversary techniques to evaluate the effectiveness of security controls and detections</li><li>
Partners with blue team, SOC, and engineering teams to test detection and response capabilities</li><li>
Implements, maintains, and enhances red team tooling and infrastructure to support penetration testing, adversary emulation, and purple team exercises</li><li>
Leads and executes purple team exercises in close coordination with the SOC and Blue Team, sharing findings, techniques, and actionable recommendations to strengthen detection, response, and recovery capabilities</li><li>
Assists in tuning and validating security controls, alerts, analytics, and incident response playbooks based on threat emulation outcomes</li><li>
Validates security detections across SIEM, EDR, identity, and cloud platforms using repeatable and measurable testing scenarios</li><li>
Produces clear, actionable reports detailing emulated adversary behavior, detection gaps, response gaps, and prioritized remediation guidance</li><li>
Presents results to technical teams and leadership, translating technical risk into business terms</li><li>
Tracks remediation progress and re-test identified issues</li><li>
Stays current on emerging threats, adversary techniques, and offensive security tooling</li><li>
Contributes to the development of red team methodologies, frameworks, and documentation</li><li>
Supports threat intelligence&ndash;driven testing aligned with real-world attack trends</li><li>
Consumes and operationalizes threat intelligence to inform adversary selection, scenario design, and testing priorities</li><li>
Promotes and raises awareness by educating others about the importance of cybersecurity</li><li>
Builds relationships with government and local agencies to promote collaborative information sharing</li><li>
Stays updated with the latest cybersecurity trends, threats, and technologies</li><li>
Participates in on-call as needed to respond to security incidents outside of regular working hours</li><li>
Provides support for storm restoration efforts</li></ul>
What does it take to be an Information Security Engineer - Offensive Security?
Required:<ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science or related field of study. In lieu of a bachelor&rsquo;s degree, an associate degree in the aforementioned fields and 3 years of information security engineering or related experience or a high school diploma or equivalency degree and 5 years of information security engineering or related experience will be considered</li><li>
Strong knowledge of network, application, and cloud security, including operating systems (Windows and Linux)</li><li>
Working knowledge of common offensive security tools, including but not limited to:<ul><li>
Metasploit, Cobalt Strike (or equivalents), Burp Suite, Nmap, BloodHound, and CrackMapExec</li></ul></li><li>
Knowledge of vulnerability remediation testing and validating the effectiveness of security controls</li><li>
Demonstrated experience collaborating closely with SOC or Blue Team functions to improve detection and incident response maturity</li><li>
Ability to develop scripts or tools using Python, PowerShell, Bash, or C#</li><li>
Solid understanding of security operations and detection technologies, including SIEM, EDR, IDS/IPS, and endpoint protection, to support adversary‑emulation and purple‑team activities</li><li>
Familiarity with industry security frameworks and methodologies, such as:<ul><li>
MITRE ATT&amp;CK</li><li>
NIST 800‑61 (Incident Response)</li><li>
SANS / CIS Critical Security Controls</li></ul></li><li>
Strong analytical and problem‑solving skills with the ability to assess complex security issues</li><li>
Excellent written and verbal communication skills, including the ability to clearly document findings and communicate risk to both technical and non‑technical audiences</li><li>
Ability to work independently with minimal supervision and respond professionally to constructive feedback</li><li>
Ability to work nights, weekends, holidays during a critical cyber incident or event</li><li>
Valid driver&rsquo;s license</li></ul>
Preferred:
<ul><li>3+ years of hands-on experience performing offensive security activities such as penetration testing, detection validation, adversary emulation, red teaming, or exploitation of applications, networks, and cloud environments</li><li>
Familiarity with evaluating security controls and risk exposure through an attacker&rsquo;s lens, including validation of compensating controls and secure design assumptions</li><li>
Experience identifying security weaknesses through threat modeling, attack simulations, and exploitation, with the ability to translate findings into actionable remediation guidance</li><li>
Experience in Energy &amp; Utilities or services industry</li><li>
Relevant certifications such CISSP, CEH, GPEN, GCIH, OSCP, OSWE, or similar offensive security focused credentials</li></ul>
Applications will be accepted until May 7, 2026.
This position has a career path which allows for advancement opportunities within the Information Security Analyst job series. The title and level are commensurate with experience. Pay range: $73,000 - $171,300
 Follow the directions to submit an application and upload your resume for the desired position.
Applications sent via e-mail and US Mail will not be accepted. No phone calls or agencies, please. All replies will be held in strict confidence.
All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, creed, color, ethnicity, arrest or conviction record, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, citizenship, genetic information, familial status, marital status, pregnancy-related condition, domestic violence victim status, veteran or military status, or any other characteristic protected by federal, state or local laws. Central Hudson Gas &amp; Electric Corporation takes affirmative action in support of its policy to employ and advance employment in individuals who are protected veterans and individuals with disabilities.
VEVRAA FEDERAL CONTRACTOR</div>

Information Security Engineer - Offensive Security

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
 <div><h2 class="jobSectionHeader">About Cyber Force</h2>

Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.
<h2 class="jobSectionHeader">
Role Overview</h2>

We are looking for a Mid-Level Penetration Tester to join our established Offensive Security &amp; Assurance practice. You will independently conduct web/API, network, mobile, and cloud penetration tests, participate in red team and adversary emulation engagements, and contribute to purple team exercises &mdash; delivering against international client engagements. You will work alongside an existing team of offensive security engineers and leverage AI-augmented tooling and LLM-based workflows.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<ul><li>Independently plan and execute web application and API penetration tests (OWASP Top 10, ASVS)</li>
<li>Conduct network pen tests: external/internal, Active Directory and Entra ID attack-path analysis, privilege escalation, lateral movement</li>
<li>Perform mobile application security assessments (OWASP MASVS)</li>
<li>Execute cloud pen tests across AWS, Azure, and GCP</li>
<li>Participate in red team and adversary emulation engagements mapped to MITRE ATT&amp;CK</li>
<li>Contribute to purple team exercises with blue team / SOC</li>
<li>Conduct social engineering campaigns: phishing, pretexting, physical</li>
<li>Develop custom exploitation tools, scripts, and payloads</li>
<li>Produce pen test reports: executive summaries, technical findings, CVSS, remediation</li>
<li>Present findings to CISOs and technical teams</li>
<li>Leverage AI tools (Claude, ChatGPT) and agentic workflows for recon, exploit research, reporting</li>
<li>Mentor junior offensive security trainees</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>2&ndash;4 years of hands-on penetration testing (web, network, + mobile/cloud/AD)</li>
<li>OSCP (Offensive Security Certified Professional) &mdash; required</li>
<li>Fluent English (written and spoken)</li>
<li>Core tools: Burp Suite Pro, Nmap, Metasploit, BloodHound, Cobalt Strike or C2, Kali Linux</li>
<li>Active Directory and Entra ID attack techniques</li>
<li>Web application security: OWASP Top 10, injection classes, SSRF, deserialization</li>
<li>Cloud security testing in AWS, Azure, or GCP</li>
<li>MITRE ATT&amp;CK mapping ability</li>
<li>Custom scripting: Python, Bash, or PowerShell</li>
<li>Demonstrated experience using LLM-based tools for offensive security tasks &mdash; this is a must</li>
<li>OSEP, OSWE, CRTO, GPEN, GXPN, or CPTS &mdash; a plus</li>
<li>VICI VCOP (Viridian Certified Offensive Operations Professional) &mdash; a plus</li>
<li>Bug bounty hall-of-fame or published CVEs &mdash; a plus</li>
<li>French language &mdash; a plus</li></ul></div>
 <div><h4 class="jobSectionHeader">Role details</h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Mid-Level Penetration Tester

Secure Data Technologies

Secure Data Technologies is seeking a Cybersecurity Engineer with a proven background in penetration testing and offensive security. This role is responsible for executing high-quality security engagements across internal networks, Active Directory environments, and web applications. This position requires an individual who can independently own engagements, meet deadlines without exception, and communicate findings clearly to both technical and business stakeholders.Compensation$85,000 to $100,000Key ResponsibilitiesPenetration Testing &amp; Red Team Operations<ul><li>Perform internal network penetration testing across client environments</li><li>Conduct Active Directory security assessments, including privilege escalation and attack path analysis</li><li>Execute web application penetration testing against modern frameworks</li><li>Support and execute red team engagements simulating real-world attack scenarios</li><li>Develop proof-of-concept exploits to validate and demonstrate risk</li></ul>Vulnerability Analysis &amp; Remediation<ul><li>Perform vulnerability scanning and validate findings beyond automated results</li><li>Analyze risk and provide clear, prioritized remediation guidance</li><li>Collaborate with internal teams and clients to improve defensive controls</li></ul>Engagement Ownership<ul><li>Manage full engagement lifecycle: scoping, testing, reporting, and client debrief</li><li>Deliver all reports on time with no exceptions</li><li>Align testing activities with PTES methodology or equivalent standards</li><li>Maintain documentation and reporting quality suitable for client delivery</li></ul>Required Technical Skills<ul><li>Internal network penetration testing</li><li>Active Directory auditing and exploitation</li><li>Web application penetration testing</li><li>Vulnerability scanning and analysis</li><li>Understanding of offensive tactics and defensive controls</li></ul>Tools &amp; Technology<ul><li>Burp Suite</li><li>Cobalt Strike</li><li>BloodHound</li><li>Nuclei</li><li>Nessus</li><li>Equivalent or similar offensive security tools</li></ul>Required Qualifications<ul><li>Minimum 3 years of hands-on penetration testing experience</li><li>Demonstrated ability to execute and deliver engagements independently</li><li>Strong technical writing skills with experience producing client-ready reports</li><li>Experience in presenting findings to clients or stakeholders</li><li>Ability to manage multiple engagements while meeting deadlines</li><li>Bachelor's degree in IT or related field</li></ul>Preferred Certifications<ul><li>OSCP (preferred)</li><li>GPEN, GWAPT, CRTO</li><li>CEH, Security+, PenTest+</li></ul>Work Style Expectations<ul><li>Operates with a high level of ownership and accountability</li><li>Self-directed and able to work with minimal oversight</li><li>Consistent delivery of high-quality work on deadline</li><li>Clear and professional communication across technical and non-technical audiences</li><li>Maintains current knowledge of evolving threats, tools, and techniques</li></ul>Physical Requirements: <ul><li>Sedentary Role: Prolonged periods of sitting at a desk, using a computer, and handling phone calls for up to 8 hours per shift. Occasional standing or walking within the office environment.</li><li>Repetitive Motions: Frequent use of hands and fingers for typing, mouse navigation, and handling call center equipment. Regular use of a headset for communication, requiring consistent hand-eye coordination.</li><li>Visual Acuity: Ability to view and interpret data on computer screens for extended periods. Capability to read small text, reports, emails, and technical instructions accurately.</li><li>Hearing Requirements: Ability to clearly hear and understand client communication over phone or digital platforms, even in a busy environment. Prolonged use of headsets for phone and virtual interactions.</li><li>Minimal Lifting: Occasionally required to lift and carry office supplies, files, or small equipment weighing up to 20 pounds.</li><li>Manual Dexterity: Ability to operate standard office equipment such as keyboards, mice, telephones, and headsets. Capability to write, type 50 WPM, and input data with speed and accuracy.</li><li>Cognitive Demands: High level of attention to detail, problem-solving, and multitasking skills required for effective troubleshooting and client support. Ability to remain focused and attentive in a fast-paced, high-pressure environment.</li><li>Communication Skills: Must be able to speak clearly and professionally, ensuring accurate information exchange with clients and team members. Ability to explain technical concepts to non-technical clients.</li><li>Environmental Requirements: Work is performed in a quiet, climate-controlled office setting designed to minimize distractions. Occasional exposure to background noise typical of a call center environment.</li><li>Travel: Some regional travel required for on-site client meetings, strategic planning sessions, or project launches. Travel may involve driving or flying and occasional overnight stays.</li></ul>No unusual environmental, lifting, or exertion requirements are associated with this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the role.SecureData Technologies, Inc. is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, genetic information, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable federal, state, or local law, in compliance with Title VII of the Civil Rights Act of 1964.Pay: $85,000.00 - $100,000.00 per yearBenefits:<ul><li>401(k)</li><li>Dental insurance</li><li>Health insurance</li><li>Life insurance</li><li>Paid time off</li><li>Professional development assistance</li><li>Vision insurance</li></ul>Application Question(s):<ul><li>Which tools have you used in penetration testing engagements?</li></ul><ul><li>Have you participated in or contributed to a full penetration testing engagement (scoping, testing, reporting, and debrief)?</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>IT: 3 years (Required)</li><li>Penetration testing: 2 years (Required)</li></ul>Language:<ul><li>English (Required)</li></ul>Location:<ul><li>O'Fallon, IL 62269 (Preferred)</li></ul>Ability to Commute:<ul><li>O'Fallon, IL 62269 (Required)</li></ul>Work Location: In person

Cybersecurity Engineer

GEICO

<div>At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities.
Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive through relentless innovation to exceed our customers&rsquo; expectations while making a real impact for our company through our shared purpose.
When you join our company, we want you to feel valued, supported and proud to work here. That&rsquo;s why we offer The GEICO Pledge: Great Company, Great Culture, Great Rewards and Great Careers.<div><div>
We are seeking a hands-on Staff Security Engineer for our Red Team with deep technical expertise in running AI-driven adversary operations that measurably improve detection and response processes. You&rsquo;ll execute at the intersection of offensive security and AI, developing novel Red Team capabilities and running operations against AI-powered systems.</div><div> 
This role is responsible for working with other stakeholders in planning, executing, and delivering Red Team, Purple Team, and other Adversary Emulation operations. Outcomes will directly inform detection engineering, incident response readiness, and control validation. You will be responsible for the testing/evaluation of AI applications and agents as well as the leveraging of agentic AI to gain efficiencies for Red Team and penetration testing efforts.</div><div> 
Success in this role means you can champion operations end-to-end: shape the scope and objectives, define safety controls and deconfliction, build or tailor emulation plans, execute advanced operator tradecraft in authorized environments, and deliver clear findings mapped to TTPs, telemetry gaps, and detection opportunities. You are someone with progressive experience on Offensive Security operations who can consistently translate realistic adversary behavior into practical defensive improvements and repeatable emulation capability.</div><div> 
This role offers a unique opportunity to expand your influence, forge critical alliances, and lead the evolution of Adversary Emulation programs in a fast-paced environment. Your impact will be felt across the organization as we strengthen our defenses against ever-evolving cyber threats through simulation of real-world cyberattacks and attempts to breach the organization's defenses.</div><div> 
Responsibilities:</div><div><ul><li>
Participate in AI-focused adversary operations: plan, execute and deliver Red Team, Purple Team and other Adversary Emulation operations.</li></ul></div><div><ul><li>
Scope and design operations: define objectives, target scope, success criteria, safety controls.</li></ul></div><div><ul><li>
Develop and run emulations: build, customize, and execute emulation plans using platforms such as MITRE Caldera, or similar products.</li></ul></div><div><ul><li>
Execute advanced AI-leveraged tradecraft across enterprise environments (identity, endpoints, networks, cloud, SaaS) in a controlled, measurable way.</li></ul></div><div><ul><li>
Partner with defenders: work directly with Detection Engineering, Threat Intelligence, and Risk Management to validate telemetry coverage, tune detections, improve response playbooks, and close visibility gaps.</li></ul></div><div><ul><li>
Champion continuous improvement and innovation in adversary operations techniques, tools, and methodologies.</li></ul></div><div>
Required Qualifications:</div><div><ul><li>
8+ years of experience in Offensive Security operations.</li></ul></div><div><ul><li>
5+ years of hands-on experience running Red Team, Purple Team, and other Adversary operations in enterprise environments.</li></ul></div></div><div><div><ul><li>
Deep understanding of LLM architecture and familiarity with how models process input, manage context, and generate output.</li></ul></div><div><ul><li>
Experience with AI frameworks and tools such as PyTorch, TensorFlow, Hugging Face, and LangChain.</li></ul></div><div><ul><li>
Experience with Azure, AWS, GCP or other cloud providers.</li></ul></div><div><ul><li>
Strong working knowledge of MITRE ATLAS and ATT&amp;CK, and the ability to translate TTPs into repeatable emulations and measurable detection outcomes.</li></ul></div><div><ul><li>
Hands-on experience with adversary emulation platforms, including building/maintaining emulations and running operations.</li></ul></div><div><ul><li>
Demonstrated capability with core operator tradecraft (C2, payload delivery, privilege escalation, lateral movement, persistence, and operational security) appropriate to authorized testing.</li></ul></div><div><ul><li>
Extensive use of red team frameworks: Cobalt Strike, Sliver, Metasploit, Empire, BloodHound.</li></ul></div><div>
Preferred Qualifications:</div><div><ul><li>
OSCP, OSCE, CRTO, CISSP, or relevant Red Team/offensive security certs.</li></ul></div><div><ul><li>
GIAC Penetration Testing, Red Team certifications (GCTI, GPEN, GXPN) a plus.</li></ul></div><div><ul><li>
Breadth and depth of knowledge in security of operating systems, networking and protocols, firewalls, databases and middleware applications, forensics, scripting and programing.</li></ul></div><div><ul><li>
Advanced level knowledge of Linux/Mac/Windows operating systems, AWS/Azure cloud environments and cloud-native resources (ex. Containers, Kubernetes, microservices, serverless functions).</li></ul></div><div><ul><li>
Experience with conducting reverse engineering on mobile applications, including applications with anti-emulator and obfuscation protections.</li></ul></div><div>
Education:</div><div><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science or a related field.</li></ul></div></div> 
Annual Salary
$110,000.00 - $260,000.00
The above annual salary range is a general guideline. Multiple factors are taken into consideration to arrive at the final hourly rate/ annual salary to be offered to the selected candidate. Factors include, but are not limited to, the scope and responsibilities of the role, the selected candidate&rsquo;s work experience, education and training, the work location as well as market and business considerations. 

GEICO will consider sponsoring a new qualified applicant for employment authorization for this position. 
The GEICO Pledge:
Great Company: At GEICO, we help our customers through life&rsquo;s twists and turns. Our mission is to protect people when they need it most and we&rsquo;re constantly evolving to stay ahead of their needs.
We&rsquo;re an iconic brand that thrives on innovation, exceeding our customers&rsquo; expectations and enabling our collective success. From day one, you&rsquo;ll take on exciting challenges that help you grow and collaborate with dynamic teams who want to make a positive impact on people&rsquo;s lives.
Great Careers: We offer a career where you can learn, grow, and thrive through personalized development programs, created with your career &ndash; and your potential &ndash; in mind. You&rsquo;ll have access to industry leading training, certification assistance, career mentorship and coaching with supportive leaders at all levels.
Great Culture: We foster an inclusive culture of shared success, rooted in integrity, a bias for action and a winning mindset. Grounded by our core values, we have an an established culture of caring, inclusion, and belonging, that values different perspectives. Our teams are led by dynamic, multi-faceted teams led by supportive leaders, driven by performance excellence and unified under a shared purpose.
As part of our culture, we also offer employee engagement and recognition programs that reward the positive impact our work makes on the lives of our customers.
Great Rewards: We offer compensation and benefits built to enhance your physical well-being, mental and emotional health and financial future.<ul><li>
Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family&rsquo;s overall well-being.</li><li>
Financial benefits including market-competitive compensation; a 401K savings plan vested from day one that offers a 6% match; performance and recognition-based incentives; and tuition assistance.</li><li>
Access to additional benefits like mental healthcare as well as fertility and adoption assistance.</li><li>
Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year.</li></ul>
The equal employment opportunity policy of the GEICO Companies provides for a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religious creed, national origin, ancestry, age, gender, pregnancy, sexual orientation, gender identity, marital status, familial status, disability or genetic information, in compliance with applicable federal, state and local law. GEICO hires and promotes individuals solely on the basis of their qualifications for the job to be filled.
GEICO reasonably accommodates qualified individuals with disabilities to enable them to receive equal employment opportunity and/or perform the essential functions of the job, unless the accommodation would impose an undue hardship to the Company. This applies to all applicants and associates. GEICO also provides a work environment in which each associate is able to be productive and work to the best of their ability. We do not condone or tolerate an atmosphere of intimidation or harassment. We expect and require the cooperation of all associates in maintaining an atmosphere free from discrimination and harassment with mutual respect by and for all associates and applicants.</div>

Staff Security Engineer – Red Team (AI)

Search 10000+ Offensive security engineer jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 offensive security engineer jobs Near Me

Offensive Security Engineer

Deloitte Innovation Hub | Cyber Security | Offensive Security Senior Engineer, Cairo, Egypt.

Information Security Engineer - Offensive Security

Mid-Level Penetration Tester

Cybersecurity Engineer

Staff Security Engineer – Red Team (AI)

Staff Security Engineer – Red Team (AI)