offensive security specialist

VentureDive

<div>Job Brief: 
We are seeking a highly skilled and detail-oriented Penetration Tester to identify, exploit, and report security vulnerabilities across our applications, systems, and networks. The ideal candidate will have hands-on experience in offensive security testing, a strong understanding of attack methodologies, and the ability to simulate real-world cyber threats to strengthen our security posture. 
 
Key Responsibilities:<ul><li>
Lead comprehensive penetration testing and security assessments across software applications to proactively identify and mitigate risks.</li><li>
Conduct vulnerability analysis, risk assessments, and security audits to ensure compliance with industry standards.</li><li>
Collaborate closely with development and architecture teams to provide actionable security insights throughout the SDLC.</li><li>
Develop and maintain detailed reports on security findings, remediation strategies, and best practices.</li><li>
Stay current with emerging cybersecurity threats, vulnerabilities, and testing methodologies.</li><li>
Design, implement, and execute automated security testing scripts and tools to enhance QA efficiency.</li><li>
Establish and refine QA and security processes to maintain the highest standards of software quality and protection.</li><li>
Participate in security incident response initiatives when necessary.</li><li>
Advise cross-functional teams on integrating security measures into product design and deployment.</li><li>
Maintain awareness and application of cloud security principles and best practices.</li><li>
Know Exploitation techniques (XSS, SQLi, SSRF, RCE)</li><li>
API security testing</li><li>
Mobile/Web pentesting specifics</li><li>
Red teaming exposure (optional but strong)</li></ul> 

Tools &amp; Technologies<ul><li>
Hands-on experience with tools such as:</li><li>
Burp Suite</li><li>
OWASP ZAP</li><li>
Metasploit Framework</li><li>
Nmap</li><li>
MobSF (for mobile security testing)</li><li>
Other vulnerability scanners and exploitation tools</li></ul> 

Qualifications &amp; Expertise<ul><li>
Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related field (or equivalent practical experience).</li><li>
Proven experience in penetration testing / ethical hacking / offensive security.</li><li>
Strong understanding of:</li><li>
Web application architecture</li><li>
HTTP/HTTPS protocols</li><li>
Authentication mechanisms (OAuth, JWT, session-based auth)</li><li>
Knowledge of OWASP Top 10 vulnerabilities and exploitation techniques.</li><li>
Familiarity with security standards and frameworks (e.g., OWASP Testing Guide, NIST).</li><li>
Hands-on experience with scripting languages such as Python, Bash, or PowerShell.</li><li>
Strong analytical and problem-solving skills.</li><li>
Strong knowledge of network penetration testing methodologies</li><li>
Experience performing vulnerability validation and risk analysis</li></ul> 

Certifications (Preferred)<ul><li>
OSCP (Offensive Security Certified Professional)</li><li>
CEH (Certified Ethical Hacker)</li></ul> 
What we look for beyond required skills 
In order to thrive at VentureDive, you 
&hellip;are intellectually smart and curious 
&hellip;have the passion for and take pride in your work 
&hellip;deeply believe in VentureDive&rsquo;s mission, vision, and values 
&hellip;have a no-frills attitude 
&hellip;are a collaborative team player 
&hellip;are ethical and honest 
 
Are you ready to put your ideas into products and solutions that will be used by millions? 
You will find VentureDive to be a quick pace, high standards, fun and a rewarding place to work at. Not only will your work reach millions of users world-wide, you will also be rewarded with competitive salaries and benefits. If you think you have what it takes to be a VenDian, come join us ... we're having a ball! 
 
#LI-Hybrid
7lxPbjOy0u</div>

Penetration Tester

Fortinet

<div>Responsibilities:
Customer Engagements : Collaborate with clients to understand their security needs and objectives. Lead and deliver Red Team and penetration testing engagements, ensuring high-quality results that align with customer expectations.
Red Team Operations : Plan and execute realistic and sophisticated Red Team operations to simulate advanced cyber threats. Mimic adversary tactics, techniques, and procedures (TTPs) to identify and exploit vulnerabilities in client environments.
Penetration Testing : Conduct thorough penetration tests on client systems, networks, and applications. Provide actionable insights and recommendations for remediation based on identified vulnerabilities.
Technical Expertise: Demonstrate proficiency in a variety of offensive security tools and techniques. Stay current with industry trends, emerging threats, and advancements in offensive security methodologies.
Documentation and Reporting : Document all testing procedures, findings, and recommendations in clear and concise reports. Communicate technical details effectively to both technical and non-technical stakeholders as well as provide proactive guidance on improving an organization&rsquo;s security posture.
Required Skills :
<ul><li>Excellent written and verbal communication skills &ndash; English
</li><li>Experience developing and conducting red team and penetration testing engagements
</li><li>Experience performing application security assessments
</li><li>Public speaking experience at known security conferences is a plus
</li><li>Capable of performing assessments with common offensive toolsets as well as the ability to build custom tools and implants
</li><li>Solid knowledge of scripting languages such as Python, Perl, PowerShell, Ruby
</li><li>Development experience using C, C++, .NET, Java, Go
</li><li>Solid understanding of Active Directory and Azure AD
</li><li>Experience carrying out vulnerability assessments, physical assessments, wireless assessments, and social engineering campaigns.
</li><li>Strong understanding of operating system internals and endpoint security controls such as EDR and various evasion techniques
</li></ul>Qualifications:
<ul><li>Bachelor&rsquo;s Degree in Computer Engineering, Computer Science or related field
</li><li>Or 8 - 10+ years&rsquo; experience in Attack and Penetration testing roles
</li><li>Certifications in offensive security such as CREST, OSCP, OSEP, GXPN, GRTP, etc.
</li></ul>#LI-BG1</div>

Senior Offensive Security Consultant – FortiGuard Proactive Services

<div>
 
 Job Brief:
 
 
 
 We are seeking a highly skilled and detail-oriented
 
 Penetration Tester
 
 to identify, exploit, and report security vulnerabilities across our applications, systems, and networks. The ideal candidate will have hands-on experience in offensive security testing, a strong understanding of attack methodologies, and the ability to simulate real-world cyber threats to strengthen our security posture.
 
 
 
 Key Responsibilities:
 
 
 
 <ul>
 <li>
 Lead comprehensive penetration testing and security assessments across software applications to proactively identify and mitigate risks
 </li>
 <li>
 Conduct vulnerability analysis, risk assessments, and security audits to ensure compliance with industry standards
 </li>
 <li>
 Collaborate closely with development and architecture teams to provide actionable security insights throughout the SDLC
 </li>
 <li>
 Develop and maintain detailed reports on security findings, remediation strategies, and best practices
 </li>
 <li>
 Stay current with emerging cybersecurity threats, vulnerabilities, and testing methodologies
 </li>
 <li>
 Design, implement, and execute automated security testing scripts and tools to enhance QA efficiency
 </li>
 <li>
 Establish and refine QA and security processes to maintain the highest standards of software quality and protection
 </li>
 <li>
 Participate in security incident response initiatives when necessary
 </li>
 <li>
 Advise cross-functional teams on integrating security measures into product design and deployment
 </li>
 <li>
 Maintain awareness and application of cloud security principles and best practices
 </li>
 <li>
 Know Exploitation techniques (XSS, SQLi, SSRF, RCE)
 </li>
 <li>
 API security testing
 </li>
 <li>
 Mobile/Web pentesting specifics
 </li>
 <li>
 Red teaming exposure (optional but strong)
 
 
 </li>
 </ul>
 
 Tools &amp; Technologies
 
 
 
 <ul>
 <li>
 Hands-on experience with tools such as:
 </li>
 <li>
 Burp Suite
 </li>
 <li>
 OWASP ZAP
 </li>
 <li>
 Metasploit Framework
 </li>
 <li>
 Nmap
 </li>
 <li>
 MobSF (for mobile security testing)
 </li>
 <li>
 Other vulnerability scanners and exploitation tools
 
 
 </li>
 </ul>
 
 Qualifications &amp; Expertise
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related field (or equivalent practical experience)
 </li>
 <li>
 Proven experience in penetration testing / ethical hacking / offensive security
 </li>
 <li>
 Strong understanding of:
 </li>
 <li>
 Web application architecture
 </li>
 <li>
 HTTP/HTTPS protocols
 </li>
 <li>
 Authentication mechanisms (OAuth, JWT, session-based auth)
 </li>
 <li>
 Knowledge of OWASP Top 10 vulnerabilities and exploitation techniques
 </li>
 <li>
 Familiarity with security standards and frameworks (e.g., OWASP Testing Guide, NIST)
 </li>
 <li>
 Hands-on experience with scripting languages such as Python, Bash, or PowerShell
 </li>
 <li>
 Strong analytical and problem-solving skills
 </li>
 <li>
 Strong knowledge of network penetration testing methodologies
 </li>
 <li>
 Experience performing vulnerability validation and risk analysis
 
 
 </li>
 </ul>
 
 Certifications (Preferred)
 
 
 
 <ul>
 <li>
 OSCP (Offensive Security Certified Professional)
 </li>
 <li>
 CEH (Certified Ethical Hacker)
 
 
 </li>
 </ul>
 
 What We Look For Beyond Required Skills
 
 
 
 In order to thrive at VentureDive, you
 
 
 &hellip;are intellectually smart and curious
 
 
 &hellip;have the passion for and take pride in your work
 
 
 &hellip;deeply believe in VentureDive&rsquo;s mission, vision, and values
 
 
 &hellip;have a no-frills attitude
 
 
 &hellip;are a collaborative team player
 
 
 &hellip;are ethical and honest
 
 
 Are you ready to put your ideas into products and solutions that will be used by millions?
 
 
 You will find VentureDive to be a quick pace, high standards, fun and a rewarding place to work at. Not only will your work reach millions of users world-wide, you will also be rewarded with competitive salaries and benefits. If you think you have what it takes to be a VenDian, come join us ... we're having a ball!
 
 
 Powered by JazzHR
 
 
 7lxPbjOy0u
 
 
</div>

TAWANTECH

<div>Summary: 
Conduct penetration testing and vulnerability assessments to identify security weaknesses in systems and applications and support risk remediation.
Responsibilities: 
Perform penetration testing across systems, networks, and applications. Identify security vulnerabilities and recommend remediation actions. Conduct testing in line with OWASP Top 10 standards and industry best practices. Prepare detailed technical reports documenting findings, impact, and mitigation steps. Collaborate with technical teams to support remediation and retesting. 
Requirements 
Required Skills &amp; Experience:
Minimum 5 years of experience in penetration testing or offensive security. Strong knowledge of penetration testing methodologies and OWASP Top 10. Proficiency in vulnerability assessment tools. Strong analytical, problem-solving, and reporting skills.</div>

Penetration Testing Engineer

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
 <div><h2 class="jobSectionHeader">About Cyber Force</h2>

Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.
<h2 class="jobSectionHeader">
Role Overview</h2>

We are looking for a Mid-Level Penetration Tester to join our established Offensive Security &amp; Assurance practice. You will independently conduct web/API, network, mobile, and cloud penetration tests, participate in red team and adversary emulation engagements, and contribute to purple team exercises &mdash; delivering against international client engagements. You will work alongside an existing team of offensive security engineers and leverage AI-augmented tooling and LLM-based workflows.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<ul><li>Independently plan and execute web application and API penetration tests (OWASP Top 10, ASVS)</li>
<li>Conduct network pen tests: external/internal, Active Directory and Entra ID attack-path analysis, privilege escalation, lateral movement</li>
<li>Perform mobile application security assessments (OWASP MASVS)</li>
<li>Execute cloud pen tests across AWS, Azure, and GCP</li>
<li>Participate in red team and adversary emulation engagements mapped to MITRE ATT&amp;CK</li>
<li>Contribute to purple team exercises with blue team / SOC</li>
<li>Conduct social engineering campaigns: phishing, pretexting, physical</li>
<li>Develop custom exploitation tools, scripts, and payloads</li>
<li>Produce pen test reports: executive summaries, technical findings, CVSS, remediation</li>
<li>Present findings to CISOs and technical teams</li>
<li>Leverage AI tools (Claude, ChatGPT) and agentic workflows for recon, exploit research, reporting</li>
<li>Mentor junior offensive security trainees</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>2&ndash;4 years of hands-on penetration testing (web, network, + mobile/cloud/AD)</li>
<li>OSCP (Offensive Security Certified Professional) &mdash; required</li>
<li>Fluent English (written and spoken)</li>
<li>Core tools: Burp Suite Pro, Nmap, Metasploit, BloodHound, Cobalt Strike or C2, Kali Linux</li>
<li>Active Directory and Entra ID attack techniques</li>
<li>Web application security: OWASP Top 10, injection classes, SSRF, deserialization</li>
<li>Cloud security testing in AWS, Azure, or GCP</li>
<li>MITRE ATT&amp;CK mapping ability</li>
<li>Custom scripting: Python, Bash, or PowerShell</li>
<li>Demonstrated experience using LLM-based tools for offensive security tasks &mdash; this is a must</li>
<li>OSEP, OSWE, CRTO, GPEN, GXPN, or CPTS &mdash; a plus</li>
<li>VICI VCOP (Viridian Certified Offensive Operations Professional) &mdash; a plus</li>
<li>Bug bounty hall-of-fame or published CVEs &mdash; a plus</li>
<li>French language &mdash; a plus</li></ul></div>
 <div><h4 class="jobSectionHeader">Role details</h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Mid-Level Penetration Tester

The Home Depot

<div>Position Purpose:
Protect what matters most to our associates and customers by leading offensive security capabilities across the enterprise. This role drives strategic and operational excellence across threat intelligence, investigations, and offensive security to proactively identify, assess, and mitigate advanced cyber threats.
Key Responsibilities<ul><li>
Lead and scale Offensive Security functions within the Security Operations organization</li><li>
Oversee proactive and reactive investigations, including advanced threat analysis, incident response support, and adversary‑focused operations</li><li>
Drive offensive security strategies (e.g., threat‑informed testing, red‑team‑aligned activities) to strengthen detection and response capabilities</li><li>
Partner cross‑functionally to reduce mean time to detect, investigate, and contain security incidents</li><li>
Establish tactical and strategic roadmaps aligned to SOC and multi‑year cybersecurity objectives</li><li>
Mentor and develop high‑performing leaders and teams; serve as a subject‑matter expert in threat investigations and offensive security disciplines</li></ul>
Preferred Qualifications<ul><li>
Experience leading cyber threat investigations, threat intelligence, or offensive security teams</li><li>
Strong background in incident response, security operations, and adversary tradecraft</li><li>
Proven people leadership with experience managing multiple teams and senior‑level stakeholders</li><li>
Ability to translate threat insights into actionable, business‑relevant recommendations</li></ul>
Key Responsibilities:<ul><li>
100% Deliver Execution, Plans &amp; Aligns, Develop Others - Collaborate cross functionally to reduce vulnerabilities, risk and incident management; Drive cross-functional alignment; Asses, develop, implement and maintain strategies to assess and resolve security risk across the enterprise; Provide leadership, mentoring and coaching to direct reports and other leaders</li></ul> 
Direct Manager/Direct Reports:<ul><li>
This position typically reports to Director or Sr. Director</li><li>
This position has 6-10 Direct Reports</li></ul> 
Travel Requirements:<ul><li>
Typically requires overnight travel less than 10% of the time.</li></ul> 
Physical Requirements:<ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul> 
Working Conditions:<ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul> 
Minimum Qualifications:<ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul> 
Preferred Qualifications:<ul><li>
4+ years of previous leadership experience</li></ul> 
Minimum Education:<ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul> 
Minimum Years of Work Experience:<ul><li>
8+</li></ul> 
Competencies:<ul><li>
Decision Quality</li><li>
Ensures Accountability</li><li>
Plans and Aligns</li><li>
Develops Talent</li></ul></div>

Cybersecurity Senior Manager | Offensive Security (Remote)

INSPYR Solutions

<div>
 
 
 Title:
 
 &nbsp;Information Security - Offensive Security Analyst
 
 
 Location:
 
 Deerfield Beach, FL (Hybrid 3/2)
 
 
 Duration:
 
 Direct Hire&nbsp;
 
 
 Compensation:
 
 $100,000 - $110,000
 
 
 Work Requirements:
 
 US Citizen, GC Holders or Authorized to Work in the U.S.
 
 
 
 Information Security - Offensive Security Analyst
 
 
 
 Description
 
 
 
 The ideal candidate is someone with a strong software development or engineering background who is intentionally transitioning into the offensive security space. This role is well-suited for an individual who enjoys building systems, tooling, and automation, and wants to apply those skills to help design, scale, and modernize offensive security capabilities.
 
 
 Success in this role comes from thinking like both an engineer and an attacker &amp;mdash; identifying gaps not just in controls, but in how security capabilities themselves are constructed, integrated, and scaled.
 
 
 This role is responsible for building and scaling offensive security capabilities&nbsp;through adversary-focused testing, attack simulation, and custom tooling and automation. The analyst will help shift the program from a primarily tool- and vendor-driven model toward a build-first approach, leveraging software engineering, automation, and AI-assisted techniques to increase coverage, depth, and repeatability of offensive security activities.
 
 
 
 Responsibilities include but are not limited to
 
 
 <ul>
 <li>
 Conduct offensive security activities including penetration testing, attack simulations, threat-based assessments, and control validation across on-prem, cloud, identity, and SaaS environments.
 </li>
 <li>
 Execute and assist in the development of red team and purple team exercises, collaborating with detection and response teams to validate defensive coverage.
 </li>
 <li>
 Perform vulnerability and exploitation analysis, including chaining weaknesses to demonstrate real-world attack paths and business risk.
 </li>
 <li>
 Identify, validate, and responsibly disclose security weaknesses to stakeholders, providing clear remediation guidance and risk context.
 </li>
 <li>
 Design, develop, and maintain custom offensive security tooling (Python, PowerShell, Bash, or similar), including frameworks, reusable modules, and automation that scale testing beyond point-in-time assessments.
 </li>
 <li>
 Evaluate when to build versus buy offensive security capabilities, with a bias toward internal tooling where it improves flexibility, visibility, or speed of iteration.
 </li>
 <li>
 Incorporate AI-assisted techniques (e.g., automation, chaining analysis, signal prioritization) to increase testing efficiency and analyst leverage
 </li>
 <li>
 Contribute documentation such as test reports, playbooks, findings templates, and executive-level summaries.
 </li>
 <li>
 Contribute to the long-term architecture of the offensive security program, including shared libraries, testing pipelines, data models, and reporting outputs optimized for reuse and scale.
 </li>
 <li>
 Mentor junior analysts and contribute to team knowledge sharing.
 </li>
 <li>
 Partner with application and platform engineering teams not only to test systems, but to co-design secure patterns, reference implementations, and reusable testing components.
 </li>
 <li>
 Build developer-consumable assets (templates, scripts, sample exploits, safe test harnesses) that enable teams to self-validate security assumptions earlier in the SDLC.
 </li>
 <li>
 Provide developer-friendly remediation guidance, proof-of-concepts, and secure coding recommendations that are actionable and aligned to real-world development workflows.
 </li>
 <li>
 Support the integration and tuning of security testing tools within CI/CD pipelines, balancing detection depth with developer experience and signal quality.
 </li>
 <li>
 Collaborate with Security Engineering and Application teams to improve self-service security capabilities, documentation, and testing patterns that developers can reuse.
 </li>
 <li>
 Participate in post-testing debriefs with developers to educate, coach, and improve security outcomes&amp;mdash;not just report findings.
 </li>
 </ul>
 
 
 Desired Skills
 
 
 <ul>
 <li>
 Hands-on experience with penetration testing, red team, purple team, or adversary emulation activities.
 </li>
 <li>
 Strong understanding of Windows, Active Directory, Azure/Entra ID, networking, cloud platforms, and SaaS architectures.
 </li>
 <li>
 Experience with common offensive security tools and frameworks (e.g., C2 frameworks, vulnerability scanners, exploit frameworks).
 </li>
 <li>
 Knowledge of MITRE ATT&amp;CK, kill chains, and attacker tradecraft.
 </li>
 <li>
 Experience validating security controls such as EDR, SIEM, identity protections, email security, and cloud security controls.
 </li>
 <li>
 Strong scripting and automation skills; ability to customize or build tools to support testing objectives.
 </li>
 <li>
 Ability to translate technical findings into clear risk-based narratives for technical and non-technical audiences.
 </li>
 <li>
 Strong analytical, problem-solving, and critical-thinking skills.
 </li>
 <li>
 Ability to work independently while collaborating effectively in cross-functional teams.
 </li>
 <li>
 High attention to detail with a strong sense of ethics and responsible disclosure.
 </li>
 <li>
 Experience working directly with software engineers to remediate vulnerabilities and improve secure development practices.
 </li>
 <li>
 Understanding of modern SDLC and CI/CD pipelines, including how security testing fits into developer workflows.
 </li>
 <li>
 Familiarity with secure coding practices and common vulnerability classes in modern applications (web, APIs, cloud-native services).
 </li>
 <li>
 Ability to communicate security findings in a way that developers can quickly understand, prioritize, and fix.
 </li>
 <li>
 Mindset oriented toward enablement over enforcement, with a focus on reducing friction while improving security outcomes.
 </li>
 <li>
 Background in software engineering, platform engineering, or SRE, with a desire to specialize in security.
 </li>
 <li>
 Experience designing or maintaining production-quality code, not just scripts.
 </li>
 <li>
 Comfort working with APIs, data pipelines, CI/CD systems, and cloud-native services as part of security capability development.
 </li>
 <li>
 Curiosity and practical interest in applying AI/ML-assisted techniques to security testing, automation, and analysis.
 </li>
 </ul>
 
 
 About INSPYR Solutions
 
 
 &nbsp;
 
 Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.
 
 &nbsp;
 
 INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.
 
 &nbsp;
 
 #IND-TELECOM
 
 
 
 Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions&rsquo; Privacy Policy and INSPYR Solutions&rsquo; AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.
 
 
 
</div>

Information Security – Offensive Security Analyst

Search 10000+ Offensive security specialist jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 offensive security specialist jobs Near Me

Penetration Tester

Senior Offensive Security Consultant – FortiGuard Proactive Services

Penetration Tester

Penetration Testing Engineer

Mid-Level Penetration Tester

Cybersecurity Senior Manager | Offensive Security (Remote)

Information Security – Offensive Security Analyst