offensive security engineer

NKU Technologies Pvt.Ltd.

We are hiring a Cybersecurity Engineer. This role is ideal for someone with hands-on technical skills who is looking to grow in offensive security while gaining exposure to client-facing engagements. Key Responsibilities:<ul><li>Perform penetration testing on web applications, APIs, and network environments</li><li>Conduct vulnerability assessments using automated tools and validate findings manually</li><li>Support red team or adversary simulation exercises as part of a team</li><li>Perform basic threat hunting activities by analyzing logs and identifying suspicious behaviour</li><li>Assist in identifying indicators of compromise (IOCs) and potential security threats</li><li>Support monitoring of external sources such as forums and online platforms for potential data leaks</li><li>Document findings and prepare clear, structured technical reports</li><li>Participate in re-testing activities to validate remediation efforts</li><li>Stay updated with the latest security vulnerabilities, tools, and techniques</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, Computer Science, or a related field</li><li>3&ndash;4 years of hands-on experience in offensive security e.g. penetration testing, vulnerability assessment and exposure with threat hunting and dark web monitoring.</li><li>Strong understanding of web security, network security, and application security concepts</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, and Wireshark</li><li>Hands-on experience with OWASP Top 10, MITRE ATT&amp;CK, and CVSS scoring</li><li>Strong understanding of threat intelligence and OSINT techniques</li><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Strong documentation and reporting capabilities</li><li>Ability to work independently with guidance from senior team members</li></ul>Preferred Certifications<ul><li>CEH (Certified Ethical Hacker)</li><li>OSCP (Offensive Security Certified Professional) or working towards it</li><li>CRTP</li></ul>Nice to Have<ul><li>knowledge of cloud platforms (AWS, Azure, GCP)</li><li>Scripting skills (Python, Bash, or PowerShell)</li><li>Exposure to SIEM or security monitoring tools</li></ul>Pay: From Rs120,000.00 per monthWork Location: In person

Offensive Security Engineer

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
 <div><h2 class="jobSectionHeader">About Cyber Force</h2>

Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.
<h2 class="jobSectionHeader">
Role Overview</h2>

We are looking for a Mid-Level Penetration Tester to join our established Offensive Security &amp; Assurance practice. You will independently conduct web/API, network, mobile, and cloud penetration tests, participate in red team and adversary emulation engagements, and contribute to purple team exercises &mdash; delivering against international client engagements. You will work alongside an existing team of offensive security engineers and leverage AI-augmented tooling and LLM-based workflows.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<ul><li>Independently plan and execute web application and API penetration tests (OWASP Top 10, ASVS)</li>
<li>Conduct network pen tests: external/internal, Active Directory and Entra ID attack-path analysis, privilege escalation, lateral movement</li>
<li>Perform mobile application security assessments (OWASP MASVS)</li>
<li>Execute cloud pen tests across AWS, Azure, and GCP</li>
<li>Participate in red team and adversary emulation engagements mapped to MITRE ATT&amp;CK</li>
<li>Contribute to purple team exercises with blue team / SOC</li>
<li>Conduct social engineering campaigns: phishing, pretexting, physical</li>
<li>Develop custom exploitation tools, scripts, and payloads</li>
<li>Produce pen test reports: executive summaries, technical findings, CVSS, remediation</li>
<li>Present findings to CISOs and technical teams</li>
<li>Leverage AI tools (Claude, ChatGPT) and agentic workflows for recon, exploit research, reporting</li>
<li>Mentor junior offensive security trainees</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>2&ndash;4 years of hands-on penetration testing (web, network, + mobile/cloud/AD)</li>
<li>OSCP (Offensive Security Certified Professional) &mdash; required</li>
<li>Fluent English (written and spoken)</li>
<li>Core tools: Burp Suite Pro, Nmap, Metasploit, BloodHound, Cobalt Strike or C2, Kali Linux</li>
<li>Active Directory and Entra ID attack techniques</li>
<li>Web application security: OWASP Top 10, injection classes, SSRF, deserialization</li>
<li>Cloud security testing in AWS, Azure, or GCP</li>
<li>MITRE ATT&amp;CK mapping ability</li>
<li>Custom scripting: Python, Bash, or PowerShell</li>
<li>Demonstrated experience using LLM-based tools for offensive security tasks &mdash; this is a must</li>
<li>OSEP, OSWE, CRTO, GPEN, GXPN, or CPTS &mdash; a plus</li>
<li>VICI VCOP (Viridian Certified Offensive Operations Professional) &mdash; a plus</li>
<li>Bug bounty hall-of-fame or published CVEs &mdash; a plus</li>
<li>French language &mdash; a plus</li></ul></div>
 <div><h4 class="jobSectionHeader">Role details</h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Mid-Level Penetration Tester

CFI Financial Group

<div>
 
 
 Who are we?
 
 
 
 CFI Financial Group is an award-winning trading provider, possessing more than 25 years of experience with multiple offices around the world including London, Larnaca, Beirut, Amman, Dubai, Kuwait, Port Louis, and others.
 
 
 Check out more about
 
 CFI
 
 here.
 
 
 CFI is hiring! Make your mark in the online trading industry.
 
 
 Are you looking to pursue a career in finance? Do you want to work with a dynamic and growing team in the exciting world of online trading and investing? If you answered yes, then we have some amazing opportunities for you!
 
 
 
 
 
 
 Description:
 
 
 
 We&rsquo;re seeking a Head of Security to lead and develop our cybersecurity function as an independent structure reporting directly to the CEO. This role requires a unique blend of offensive security expertise, hands-on engineering background, and the ability to implement pragmatic security controls that guard rather than block business velocity. You&rsquo;ll work closely with the CTO and technology teams to build security into our delivery pipeline while preparing the organization for regulatory compliance in financial services.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 
 
 <ul>
 <li>
 Build security frameworks based on ISO 27001, NIST CSF, CIS Controls, and SOC 2, Ensure compliance with DORA, EBA Guidelines, ISO 27001
 </li>
 <li>
 Implement information security governance structure, policies, and risk management processes
 </li>
 <li>
 Establish and maintain security metrics, KPIs, and reporting for executive leadership
 </li>
 <li>
 Secure Perimeter &amp; Infrastructure Protection -Design and implement network segmentation and secure perimeter architecture
 </li>
 <li>
 Collaborate with development teams to establish secure SDLC practices: Integrate security into CI/CD pipelines with automated quality gates (SAST, DAST, SCA, container scanning, aplication security tools)
 </li>
 <li>
 Conduct penetration testing and API security assesments using Kali Linux, Metasploit, Burp Suite, and other offensive security tools
 </li>
 <li>
 Provide hands-on remediation guidance that developers can implement
 </li>
 </ul>
 
 
 
 
 
 Requirements:
 
 
 <ul>
 <li>
 Required Certifications (minimum 2):
 </li>
 </ul>
 
 Offensive Security ( OSCP, OSCE, GPEN, or CEH), Security Management (CISSP or CISM),
 
 
 Cloud Security (CCSP, AWS Security Specialty, or Azure Security Engineer), Audit (CISA)
 
 <ul>
 <li>
 8+ years in information security roles
 </li>
 <li>
 3+ years in security leadership positions
 </li>
 <li>
 Mandatory: Experience in regulated financial services (banking, brokerage, payments, fintech)
 </li>
 <li>
 Hands-on penetration testing and vulnerability assessment experience
 </li>
 <li>
 Development or DevOps background with practical coding experience
 </li>
 <li>
 Successfully implemented DevSecOps practices and security automation
 </li>
 <li>
 Experience with regulatory audits and compliance assessments
 </li>
 </ul>
 
 
 Required Technical Skills:
 
 
 <ul>
 <li>
 Offensive security tools: Kali Linux, Metasploit, Burp Suite, Nmap, Wireshark, SQLMap
 </li>
 <li>
 Programming: Proficient in Python (prefferable) or atl least one other language
 </li>
 <li>
 Scripting: Mandatory proficiency in Bash, Zsh, and PowerShell
 </li>
 <li>
 Pragmatic security mindset: Balance security with business enablement
 </li>
 <li>
 Collaborative leadership: Build trust with engineering teams
 </li>
 <li>
 Strong communication: Translate security risks into business impact
 </li>
 </ul>
 
 
 
 
 
 Nice to Have:
 
 
 <ul>
 <li>
 Experience with trading platforms, payment systems, or financial infrastructure
 </li>
 <li>
 Knowledge of AI/ML/LLM security considerations
 </li>
 <li>
 Familiarity with MT5, trading APIs, payment processing systems
 </li>
 </ul>
 
 
 
 
 
 Why join CFI?
 
 
 
 &middot; We&rsquo;re a fast-growing, multinational company
 
 
 &middot; Competitive salaries and benefits
 
 
 &middot; Work and learn with industry professions
 
 
 &middot; Supportive and collaborative environment
 
 
 &middot; Unlimited opportunities for growth and development
 
</div>

Group Head of Security

INSPYR Solutions

<div>
 
 
 Title:
 
 &nbsp;Information Security - Offensive Security Analyst
 
 
 Location:
 
 Deerfield Beach, FL (Hybrid 3/2)
 
 
 Duration:
 
 Direct Hire&nbsp;
 
 
 Compensation:
 
 $100,000 - $110,000
 
 
 Work Requirements:
 
 US Citizen, GC Holders or Authorized to Work in the U.S.
 
 
 
 Information Security - Offensive Security Analyst
 
 
 
 Description
 
 
 
 The ideal candidate is someone with a strong software development or engineering background who is intentionally transitioning into the offensive security space. This role is well-suited for an individual who enjoys building systems, tooling, and automation, and wants to apply those skills to help design, scale, and modernize offensive security capabilities.
 
 
 Success in this role comes from thinking like both an engineer and an attacker &amp;mdash; identifying gaps not just in controls, but in how security capabilities themselves are constructed, integrated, and scaled.
 
 
 This role is responsible for building and scaling offensive security capabilities&nbsp;through adversary-focused testing, attack simulation, and custom tooling and automation. The analyst will help shift the program from a primarily tool- and vendor-driven model toward a build-first approach, leveraging software engineering, automation, and AI-assisted techniques to increase coverage, depth, and repeatability of offensive security activities.
 
 
 
 Responsibilities include but are not limited to
 
 
 <ul>
 <li>
 Conduct offensive security activities including penetration testing, attack simulations, threat-based assessments, and control validation across on-prem, cloud, identity, and SaaS environments.
 </li>
 <li>
 Execute and assist in the development of red team and purple team exercises, collaborating with detection and response teams to validate defensive coverage.
 </li>
 <li>
 Perform vulnerability and exploitation analysis, including chaining weaknesses to demonstrate real-world attack paths and business risk.
 </li>
 <li>
 Identify, validate, and responsibly disclose security weaknesses to stakeholders, providing clear remediation guidance and risk context.
 </li>
 <li>
 Design, develop, and maintain custom offensive security tooling (Python, PowerShell, Bash, or similar), including frameworks, reusable modules, and automation that scale testing beyond point-in-time assessments.
 </li>
 <li>
 Evaluate when to build versus buy offensive security capabilities, with a bias toward internal tooling where it improves flexibility, visibility, or speed of iteration.
 </li>
 <li>
 Incorporate AI-assisted techniques (e.g., automation, chaining analysis, signal prioritization) to increase testing efficiency and analyst leverage
 </li>
 <li>
 Contribute documentation such as test reports, playbooks, findings templates, and executive-level summaries.
 </li>
 <li>
 Contribute to the long-term architecture of the offensive security program, including shared libraries, testing pipelines, data models, and reporting outputs optimized for reuse and scale.
 </li>
 <li>
 Mentor junior analysts and contribute to team knowledge sharing.
 </li>
 <li>
 Partner with application and platform engineering teams not only to test systems, but to co-design secure patterns, reference implementations, and reusable testing components.
 </li>
 <li>
 Build developer-consumable assets (templates, scripts, sample exploits, safe test harnesses) that enable teams to self-validate security assumptions earlier in the SDLC.
 </li>
 <li>
 Provide developer-friendly remediation guidance, proof-of-concepts, and secure coding recommendations that are actionable and aligned to real-world development workflows.
 </li>
 <li>
 Support the integration and tuning of security testing tools within CI/CD pipelines, balancing detection depth with developer experience and signal quality.
 </li>
 <li>
 Collaborate with Security Engineering and Application teams to improve self-service security capabilities, documentation, and testing patterns that developers can reuse.
 </li>
 <li>
 Participate in post-testing debriefs with developers to educate, coach, and improve security outcomes&amp;mdash;not just report findings.
 </li>
 </ul>
 
 
 Desired Skills
 
 
 <ul>
 <li>
 Hands-on experience with penetration testing, red team, purple team, or adversary emulation activities.
 </li>
 <li>
 Strong understanding of Windows, Active Directory, Azure/Entra ID, networking, cloud platforms, and SaaS architectures.
 </li>
 <li>
 Experience with common offensive security tools and frameworks (e.g., C2 frameworks, vulnerability scanners, exploit frameworks).
 </li>
 <li>
 Knowledge of MITRE ATT&amp;CK, kill chains, and attacker tradecraft.
 </li>
 <li>
 Experience validating security controls such as EDR, SIEM, identity protections, email security, and cloud security controls.
 </li>
 <li>
 Strong scripting and automation skills; ability to customize or build tools to support testing objectives.
 </li>
 <li>
 Ability to translate technical findings into clear risk-based narratives for technical and non-technical audiences.
 </li>
 <li>
 Strong analytical, problem-solving, and critical-thinking skills.
 </li>
 <li>
 Ability to work independently while collaborating effectively in cross-functional teams.
 </li>
 <li>
 High attention to detail with a strong sense of ethics and responsible disclosure.
 </li>
 <li>
 Experience working directly with software engineers to remediate vulnerabilities and improve secure development practices.
 </li>
 <li>
 Understanding of modern SDLC and CI/CD pipelines, including how security testing fits into developer workflows.
 </li>
 <li>
 Familiarity with secure coding practices and common vulnerability classes in modern applications (web, APIs, cloud-native services).
 </li>
 <li>
 Ability to communicate security findings in a way that developers can quickly understand, prioritize, and fix.
 </li>
 <li>
 Mindset oriented toward enablement over enforcement, with a focus on reducing friction while improving security outcomes.
 </li>
 <li>
 Background in software engineering, platform engineering, or SRE, with a desire to specialize in security.
 </li>
 <li>
 Experience designing or maintaining production-quality code, not just scripts.
 </li>
 <li>
 Comfort working with APIs, data pipelines, CI/CD systems, and cloud-native services as part of security capability development.
 </li>
 <li>
 Curiosity and practical interest in applying AI/ML-assisted techniques to security testing, automation, and analysis.
 </li>
 </ul>
 
 
 About INSPYR Solutions
 
 
 &nbsp;
 
 Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.
 
 &nbsp;
 
 INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.
 
 &nbsp;
 
 #IND-TELECOM
 
 
 
 Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions&rsquo; Privacy Policy and INSPYR Solutions&rsquo; AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.
 
 
 
</div>

Information Security – Offensive Security Analyst

The Home Depot

<div>Position Purpose:
Protect what matters most to our associates and customers by leading offensive security capabilities across the enterprise. This role drives strategic and operational excellence across threat intelligence, investigations, and offensive security to proactively identify, assess, and mitigate advanced cyber threats.
Key Responsibilities<ul><li>
Lead and scale Offensive Security functions within the Security Operations organization</li><li>
Oversee proactive and reactive investigations, including advanced threat analysis, incident response support, and adversary‑focused operations</li><li>
Drive offensive security strategies (e.g., threat‑informed testing, red‑team‑aligned activities) to strengthen detection and response capabilities</li><li>
Partner cross‑functionally to reduce mean time to detect, investigate, and contain security incidents</li><li>
Establish tactical and strategic roadmaps aligned to SOC and multi‑year cybersecurity objectives</li><li>
Mentor and develop high‑performing leaders and teams; serve as a subject‑matter expert in threat investigations and offensive security disciplines</li></ul>
Preferred Qualifications<ul><li>
Experience leading cyber threat investigations, threat intelligence, or offensive security teams</li><li>
Strong background in incident response, security operations, and adversary tradecraft</li><li>
Proven people leadership with experience managing multiple teams and senior‑level stakeholders</li><li>
Ability to translate threat insights into actionable, business‑relevant recommendations</li></ul>
Key Responsibilities:<ul><li>
100% Deliver Execution, Plans &amp; Aligns, Develop Others - Collaborate cross functionally to reduce vulnerabilities, risk and incident management; Drive cross-functional alignment; Asses, develop, implement and maintain strategies to assess and resolve security risk across the enterprise; Provide leadership, mentoring and coaching to direct reports and other leaders</li></ul> 
Direct Manager/Direct Reports:<ul><li>
This position typically reports to Director or Sr. Director</li><li>
This position has 6-10 Direct Reports</li></ul> 
Travel Requirements:<ul><li>
Typically requires overnight travel less than 10% of the time.</li></ul> 
Physical Requirements:<ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul> 
Working Conditions:<ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul> 
Minimum Qualifications:<ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul> 
Preferred Qualifications:<ul><li>
4+ years of previous leadership experience</li></ul> 
Minimum Education:<ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul> 
Minimum Years of Work Experience:<ul><li>
8+</li></ul> 
Competencies:<ul><li>
Decision Quality</li><li>
Ensures Accountability</li><li>
Plans and Aligns</li><li>
Develops Talent</li></ul></div>

Cybersecurity Senior Manager | Offensive Security (Remote)

Tabby

<div><h3 class="jobSectionHeader">Description</h3><div> 
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 15 million users choose Tabby to stay in control of their spending and make the most out of their money.</div><div>
 
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 40,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. 
</div><div>Tabby generates over $10 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. 
</div><div>Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $4.5 billion.</div><div>
 
We are thrilled to announce an opportunity for a skilled Information Security Engineer to join our team and play a role in enhancing our security measures by utilizing your abilities and deep knowledge of information security methodologies. Paying attention to details and efficiently solving problems will be crucial in ensuring the safety of Tabby&rsquo;s systems. 
 
The role you will be involved in both operations and important implementation projects contributing to the growth and maintenance of our technology infrastructure. If you have a passion for cybersecurity, possess technical skills and aspire to make a significant impact we strongly encourage you to apply and become an essential part of our dedicated cybersecurity team.</div><h3 class="jobSectionHeader"> 
Key Responsibilities</h3> 
<ul>
<li>
Penetration Testing: Perform Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) for Web, Mobile, and API applications. Plan and conduct Infrastructure Vulnerability Assessment and Penetration Testing of systems, switches, servers, and more.</li>
<li>Adversary Simulation (Red Teaming): Participate in sophisticated Red Team</li>
<li>engagements, emulating real-world threat actor Tactics, Techniques, and Procedures (TTPs) to assess the detection and response capabilities of the Blue Team/SOC.</li>
<li>Vulnerability &amp; Application Security Analysis: Conduct both Dynamic (DAST) and Static (SAST) Application Security Testing, and perform systematic vulnerability assessments using automated tools combined with meticulous manual verification.</li>
<li>Report Development: Produce actionable, high-quality assessment reports that clearly articulate technical findings, business risk, and remediation strategies for both technical implementers and non-technical executives.</li>
<li>Control Evasion &amp; Social Engineering: Conduct controlled offensive testing, including Breach &amp; Attack Simulations (BAS) and targeted phishing campaigns, to assess the resilience and bypassability of technical and human controls.</li>
<li>Tool Development &amp; Reporting: Develop and maintain custom scripts and tools to enhance offensive security capabilities, and produce high-quality, actionable reports detailing discovered threats and validated vulnerabilities on an ongoing basis.</li>
<li>Security Awareness: Experience in conducting phishing simulations and other</li>
<li>awareness exercises to evaluate employee susceptibility to social engineering attacks and provide targeted training to enhance resilience.</li></ul><div></div><h3 class="jobSectionHeader"> 
Skills, Knowledge &amp; Expertise</h3> 
<ul>
<li>
Degree in Information Technology, Computer Science, Software Engineering, or related field</li>
<li>Knowledge of Information Technology security issues and approaches to manage</li>
<li>Information Technology security with a fast paced Fintech environment.</li>
<li>Security Qualification Good to have: Offensive Security Certified Professional (OSCP), GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), CREST Registered Penetration Tester (CRT) or equivalent.</li>
<li>Excellent communication, influencing and stakeholder management skills</li>
<li>2-3 Experience of working across teams to deliver solutions and generate high levels of internal buy-in</li>
<li>Experience of working in a culturally diverse environment</li>
<li>Knowledge of online technologies, payment methods, content delivery networks, REST APIs, microservices, and application development.</li>
<li>Programming and scripting understanding (Bash, Python etc.)</li></ul><div></div><h3 class="jobSectionHeader"> 
About Tabby</h3><div>
Tabby creates financial freedom in the way people shop, earn and save, by reshaping their relationship with money. 
 
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA and Shein use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. 
 
Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest rated, most reviewed, largest and fastest growing app of any fintech in the GCC region. 
 
Tabby launched operations in 2020 and has raised +$1 billion in equity and debt funding from global and regional investors.</div></div>

Information Security Engineer - VAPT (Saudi National)

Fortinet

<div>Responsibilities:
Customer Engagements : Collaborate with clients to understand their security needs and objectives. Lead and deliver Red Team and penetration testing engagements, ensuring high-quality results that align with customer expectations.
Red Team Operations : Plan and execute realistic and sophisticated Red Team operations to simulate advanced cyber threats. Mimic adversary tactics, techniques, and procedures (TTPs) to identify and exploit vulnerabilities in client environments.
Penetration Testing : Conduct thorough penetration tests on client systems, networks, and applications. Provide actionable insights and recommendations for remediation based on identified vulnerabilities.
Technical Expertise: Demonstrate proficiency in a variety of offensive security tools and techniques. Stay current with industry trends, emerging threats, and advancements in offensive security methodologies.
Documentation and Reporting : Document all testing procedures, findings, and recommendations in clear and concise reports. Communicate technical details effectively to both technical and non-technical stakeholders as well as provide proactive guidance on improving an organization&rsquo;s security posture.
Required Skills :
<ul><li>Excellent written and verbal communication skills &ndash; English
</li><li>Experience developing and conducting red team and penetration testing engagements
</li><li>Experience performing application security assessments
</li><li>Public speaking experience at known security conferences is a plus
</li><li>Capable of performing assessments with common offensive toolsets as well as the ability to build custom tools and implants
</li><li>Solid knowledge of scripting languages such as Python, Perl, PowerShell, Ruby
</li><li>Development experience using C, C++, .NET, Java, Go
</li><li>Solid understanding of Active Directory and Azure AD
</li><li>Experience carrying out vulnerability assessments, physical assessments, wireless assessments, and social engineering campaigns.
</li><li>Strong understanding of operating system internals and endpoint security controls such as EDR and various evasion techniques
</li></ul>Qualifications:
<ul><li>Bachelor&rsquo;s Degree in Computer Engineering, Computer Science or related field
</li><li>Or 8 - 10+ years&rsquo; experience in Attack and Penetration testing roles
</li><li>Certifications in offensive security such as CREST, OSCP, OSEP, GXPN, GRTP, etc.
</li></ul>#LI-BG1</div>

Senior Offensive Security Consultant – FortiGuard Proactive Services

Search 10000+ Offensive security engineer jobs near you this May. New roles added regularly across leading industries. Apply today.