senior offensive security engineer

NKU Technologies Pvt.Ltd.

We are hiring a Cybersecurity Engineer. This role is ideal for someone with hands-on technical skills who is looking to grow in offensive security while gaining exposure to client-facing engagements. Key Responsibilities:<ul><li>Perform penetration testing on web applications, APIs, and network environments</li><li>Conduct vulnerability assessments using automated tools and validate findings manually</li><li>Support red team or adversary simulation exercises as part of a team</li><li>Perform basic threat hunting activities by analyzing logs and identifying suspicious behaviour</li><li>Assist in identifying indicators of compromise (IOCs) and potential security threats</li><li>Support monitoring of external sources such as forums and online platforms for potential data leaks</li><li>Document findings and prepare clear, structured technical reports</li><li>Participate in re-testing activities to validate remediation efforts</li><li>Stay updated with the latest security vulnerabilities, tools, and techniques</li><li>Ensure all testing activities comply with legal, regulatory, and contractual requirements.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, IT, Computer Science, or a related field</li><li>3&ndash;4 years of hands-on experience in offensive security e.g. penetration testing, vulnerability assessment and exposure with threat hunting and dark web monitoring.</li><li>Strong understanding of web security, network security, and application security concepts</li><li>Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, and Wireshark</li><li>Hands-on experience with OWASP Top 10, MITRE ATT&amp;CK, and CVSS scoring</li><li>Strong understanding of threat intelligence and OSINT techniques</li><li>Strong analytical and investigative mindset</li><li>Excellent client communication and presentation skills</li><li>Strong documentation and reporting capabilities</li><li>Ability to work independently with guidance from senior team members</li></ul>Preferred Certifications<ul><li>CEH (Certified Ethical Hacker)</li><li>OSCP (Offensive Security Certified Professional) or working towards it</li><li>CRTP</li></ul>Nice to Have<ul><li>knowledge of cloud platforms (AWS, Azure, GCP)</li><li>Scripting skills (Python, Bash, or PowerShell)</li><li>Exposure to SIEM or security monitoring tools</li></ul>Pay: From Rs120,000.00 per monthWork Location: In person

Offensive Security Engineer

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
 <div><h2 class="jobSectionHeader">About Cyber Force</h2>

Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.
<h2 class="jobSectionHeader">
Role Overview</h2>

We are looking for a Mid-Level Penetration Tester to join our established Offensive Security &amp; Assurance practice. You will independently conduct web/API, network, mobile, and cloud penetration tests, participate in red team and adversary emulation engagements, and contribute to purple team exercises &mdash; delivering against international client engagements. You will work alongside an existing team of offensive security engineers and leverage AI-augmented tooling and LLM-based workflows.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<ul><li>Independently plan and execute web application and API penetration tests (OWASP Top 10, ASVS)</li>
<li>Conduct network pen tests: external/internal, Active Directory and Entra ID attack-path analysis, privilege escalation, lateral movement</li>
<li>Perform mobile application security assessments (OWASP MASVS)</li>
<li>Execute cloud pen tests across AWS, Azure, and GCP</li>
<li>Participate in red team and adversary emulation engagements mapped to MITRE ATT&amp;CK</li>
<li>Contribute to purple team exercises with blue team / SOC</li>
<li>Conduct social engineering campaigns: phishing, pretexting, physical</li>
<li>Develop custom exploitation tools, scripts, and payloads</li>
<li>Produce pen test reports: executive summaries, technical findings, CVSS, remediation</li>
<li>Present findings to CISOs and technical teams</li>
<li>Leverage AI tools (Claude, ChatGPT) and agentic workflows for recon, exploit research, reporting</li>
<li>Mentor junior offensive security trainees</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>2&ndash;4 years of hands-on penetration testing (web, network, + mobile/cloud/AD)</li>
<li>OSCP (Offensive Security Certified Professional) &mdash; required</li>
<li>Fluent English (written and spoken)</li>
<li>Core tools: Burp Suite Pro, Nmap, Metasploit, BloodHound, Cobalt Strike or C2, Kali Linux</li>
<li>Active Directory and Entra ID attack techniques</li>
<li>Web application security: OWASP Top 10, injection classes, SSRF, deserialization</li>
<li>Cloud security testing in AWS, Azure, or GCP</li>
<li>MITRE ATT&amp;CK mapping ability</li>
<li>Custom scripting: Python, Bash, or PowerShell</li>
<li>Demonstrated experience using LLM-based tools for offensive security tasks &mdash; this is a must</li>
<li>OSEP, OSWE, CRTO, GPEN, GXPN, or CPTS &mdash; a plus</li>
<li>VICI VCOP (Viridian Certified Offensive Operations Professional) &mdash; a plus</li>
<li>Bug bounty hall-of-fame or published CVEs &mdash; a plus</li>
<li>French language &mdash; a plus</li></ul></div>
 <div><h4 class="jobSectionHeader">Role details</h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Mid-Level Penetration Tester

The Home Depot

<div>Position Purpose:
Protect what matters most to our associates and customers by leading offensive security capabilities across the enterprise. This role drives strategic and operational excellence across threat intelligence, investigations, and offensive security to proactively identify, assess, and mitigate advanced cyber threats.
Key Responsibilities<ul><li>
Lead and scale Offensive Security functions within the Security Operations organization</li><li>
Oversee proactive and reactive investigations, including advanced threat analysis, incident response support, and adversary‑focused operations</li><li>
Drive offensive security strategies (e.g., threat‑informed testing, red‑team‑aligned activities) to strengthen detection and response capabilities</li><li>
Partner cross‑functionally to reduce mean time to detect, investigate, and contain security incidents</li><li>
Establish tactical and strategic roadmaps aligned to SOC and multi‑year cybersecurity objectives</li><li>
Mentor and develop high‑performing leaders and teams; serve as a subject‑matter expert in threat investigations and offensive security disciplines</li></ul>
Preferred Qualifications<ul><li>
Experience leading cyber threat investigations, threat intelligence, or offensive security teams</li><li>
Strong background in incident response, security operations, and adversary tradecraft</li><li>
Proven people leadership with experience managing multiple teams and senior‑level stakeholders</li><li>
Ability to translate threat insights into actionable, business‑relevant recommendations</li></ul>
Key Responsibilities:<ul><li>
100% Deliver Execution, Plans &amp; Aligns, Develop Others - Collaborate cross functionally to reduce vulnerabilities, risk and incident management; Drive cross-functional alignment; Asses, develop, implement and maintain strategies to assess and resolve security risk across the enterprise; Provide leadership, mentoring and coaching to direct reports and other leaders</li></ul> 
Direct Manager/Direct Reports:<ul><li>
This position typically reports to Director or Sr. Director</li><li>
This position has 6-10 Direct Reports</li></ul> 
Travel Requirements:<ul><li>
Typically requires overnight travel less than 10% of the time.</li></ul> 
Physical Requirements:<ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul> 
Working Conditions:<ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul> 
Minimum Qualifications:<ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul> 
Preferred Qualifications:<ul><li>
4+ years of previous leadership experience</li></ul> 
Minimum Education:<ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul> 
Minimum Years of Work Experience:<ul><li>
8+</li></ul> 
Competencies:<ul><li>
Decision Quality</li><li>
Ensures Accountability</li><li>
Plans and Aligns</li><li>
Develops Talent</li></ul></div>

Cybersecurity Senior Manager | Offensive Security (Remote)

INSPYR Solutions

<div>
 
 
 Title:
 
 &nbsp;Information Security - Offensive Security Analyst
 
 
 Location:
 
 Deerfield Beach, FL (Hybrid 3/2)
 
 
 Duration:
 
 Direct Hire&nbsp;
 
 
 Compensation:
 
 $100,000 - $110,000
 
 
 Work Requirements:
 
 US Citizen, GC Holders or Authorized to Work in the U.S.
 
 
 
 Information Security - Offensive Security Analyst
 
 
 
 Description
 
 
 
 The ideal candidate is someone with a strong software development or engineering background who is intentionally transitioning into the offensive security space. This role is well-suited for an individual who enjoys building systems, tooling, and automation, and wants to apply those skills to help design, scale, and modernize offensive security capabilities.
 
 
 Success in this role comes from thinking like both an engineer and an attacker &amp;mdash; identifying gaps not just in controls, but in how security capabilities themselves are constructed, integrated, and scaled.
 
 
 This role is responsible for building and scaling offensive security capabilities&nbsp;through adversary-focused testing, attack simulation, and custom tooling and automation. The analyst will help shift the program from a primarily tool- and vendor-driven model toward a build-first approach, leveraging software engineering, automation, and AI-assisted techniques to increase coverage, depth, and repeatability of offensive security activities.
 
 
 
 Responsibilities include but are not limited to
 
 
 <ul>
 <li>
 Conduct offensive security activities including penetration testing, attack simulations, threat-based assessments, and control validation across on-prem, cloud, identity, and SaaS environments.
 </li>
 <li>
 Execute and assist in the development of red team and purple team exercises, collaborating with detection and response teams to validate defensive coverage.
 </li>
 <li>
 Perform vulnerability and exploitation analysis, including chaining weaknesses to demonstrate real-world attack paths and business risk.
 </li>
 <li>
 Identify, validate, and responsibly disclose security weaknesses to stakeholders, providing clear remediation guidance and risk context.
 </li>
 <li>
 Design, develop, and maintain custom offensive security tooling (Python, PowerShell, Bash, or similar), including frameworks, reusable modules, and automation that scale testing beyond point-in-time assessments.
 </li>
 <li>
 Evaluate when to build versus buy offensive security capabilities, with a bias toward internal tooling where it improves flexibility, visibility, or speed of iteration.
 </li>
 <li>
 Incorporate AI-assisted techniques (e.g., automation, chaining analysis, signal prioritization) to increase testing efficiency and analyst leverage
 </li>
 <li>
 Contribute documentation such as test reports, playbooks, findings templates, and executive-level summaries.
 </li>
 <li>
 Contribute to the long-term architecture of the offensive security program, including shared libraries, testing pipelines, data models, and reporting outputs optimized for reuse and scale.
 </li>
 <li>
 Mentor junior analysts and contribute to team knowledge sharing.
 </li>
 <li>
 Partner with application and platform engineering teams not only to test systems, but to co-design secure patterns, reference implementations, and reusable testing components.
 </li>
 <li>
 Build developer-consumable assets (templates, scripts, sample exploits, safe test harnesses) that enable teams to self-validate security assumptions earlier in the SDLC.
 </li>
 <li>
 Provide developer-friendly remediation guidance, proof-of-concepts, and secure coding recommendations that are actionable and aligned to real-world development workflows.
 </li>
 <li>
 Support the integration and tuning of security testing tools within CI/CD pipelines, balancing detection depth with developer experience and signal quality.
 </li>
 <li>
 Collaborate with Security Engineering and Application teams to improve self-service security capabilities, documentation, and testing patterns that developers can reuse.
 </li>
 <li>
 Participate in post-testing debriefs with developers to educate, coach, and improve security outcomes&amp;mdash;not just report findings.
 </li>
 </ul>
 
 
 Desired Skills
 
 
 <ul>
 <li>
 Hands-on experience with penetration testing, red team, purple team, or adversary emulation activities.
 </li>
 <li>
 Strong understanding of Windows, Active Directory, Azure/Entra ID, networking, cloud platforms, and SaaS architectures.
 </li>
 <li>
 Experience with common offensive security tools and frameworks (e.g., C2 frameworks, vulnerability scanners, exploit frameworks).
 </li>
 <li>
 Knowledge of MITRE ATT&amp;CK, kill chains, and attacker tradecraft.
 </li>
 <li>
 Experience validating security controls such as EDR, SIEM, identity protections, email security, and cloud security controls.
 </li>
 <li>
 Strong scripting and automation skills; ability to customize or build tools to support testing objectives.
 </li>
 <li>
 Ability to translate technical findings into clear risk-based narratives for technical and non-technical audiences.
 </li>
 <li>
 Strong analytical, problem-solving, and critical-thinking skills.
 </li>
 <li>
 Ability to work independently while collaborating effectively in cross-functional teams.
 </li>
 <li>
 High attention to detail with a strong sense of ethics and responsible disclosure.
 </li>
 <li>
 Experience working directly with software engineers to remediate vulnerabilities and improve secure development practices.
 </li>
 <li>
 Understanding of modern SDLC and CI/CD pipelines, including how security testing fits into developer workflows.
 </li>
 <li>
 Familiarity with secure coding practices and common vulnerability classes in modern applications (web, APIs, cloud-native services).
 </li>
 <li>
 Ability to communicate security findings in a way that developers can quickly understand, prioritize, and fix.
 </li>
 <li>
 Mindset oriented toward enablement over enforcement, with a focus on reducing friction while improving security outcomes.
 </li>
 <li>
 Background in software engineering, platform engineering, or SRE, with a desire to specialize in security.
 </li>
 <li>
 Experience designing or maintaining production-quality code, not just scripts.
 </li>
 <li>
 Comfort working with APIs, data pipelines, CI/CD systems, and cloud-native services as part of security capability development.
 </li>
 <li>
 Curiosity and practical interest in applying AI/ML-assisted techniques to security testing, automation, and analysis.
 </li>
 </ul>
 
 
 About INSPYR Solutions
 
 
 &nbsp;
 
 Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.
 
 &nbsp;
 
 INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.
 
 &nbsp;
 
 #IND-TELECOM
 
 
 
 Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions&rsquo; Privacy Policy and INSPYR Solutions&rsquo; AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.
 
 
 
</div>

Information Security – Offensive Security Analyst

CFI Financial Group

<div>
 
 
 Who are we?
 
 
 
 CFI Financial Group is an award-winning trading provider, possessing more than 25 years of experience with multiple offices around the world including London, Larnaca, Beirut, Amman, Dubai, Kuwait, Port Louis, and others.
 
 
 Check out more about
 
 CFI
 
 here.
 
 
 CFI is hiring! Make your mark in the online trading industry.
 
 
 Are you looking to pursue a career in finance? Do you want to work with a dynamic and growing team in the exciting world of online trading and investing? If you answered yes, then we have some amazing opportunities for you!
 
 
 
 
 
 
 Description:
 
 
 
 We&rsquo;re seeking a Head of Security to lead and develop our cybersecurity function as an independent structure reporting directly to the CEO. This role requires a unique blend of offensive security expertise, hands-on engineering background, and the ability to implement pragmatic security controls that guard rather than block business velocity. You&rsquo;ll work closely with the CTO and technology teams to build security into our delivery pipeline while preparing the organization for regulatory compliance in financial services.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 
 
 <ul>
 <li>
 Build security frameworks based on ISO 27001, NIST CSF, CIS Controls, and SOC 2, Ensure compliance with DORA, EBA Guidelines, ISO 27001
 </li>
 <li>
 Implement information security governance structure, policies, and risk management processes
 </li>
 <li>
 Establish and maintain security metrics, KPIs, and reporting for executive leadership
 </li>
 <li>
 Secure Perimeter &amp; Infrastructure Protection -Design and implement network segmentation and secure perimeter architecture
 </li>
 <li>
 Collaborate with development teams to establish secure SDLC practices: Integrate security into CI/CD pipelines with automated quality gates (SAST, DAST, SCA, container scanning, aplication security tools)
 </li>
 <li>
 Conduct penetration testing and API security assesments using Kali Linux, Metasploit, Burp Suite, and other offensive security tools
 </li>
 <li>
 Provide hands-on remediation guidance that developers can implement
 </li>
 </ul>
 
 
 
 
 
 Requirements:
 
 
 <ul>
 <li>
 Required Certifications (minimum 2):
 </li>
 </ul>
 
 Offensive Security ( OSCP, OSCE, GPEN, or CEH), Security Management (CISSP or CISM),
 
 
 Cloud Security (CCSP, AWS Security Specialty, or Azure Security Engineer), Audit (CISA)
 
 <ul>
 <li>
 8+ years in information security roles
 </li>
 <li>
 3+ years in security leadership positions
 </li>
 <li>
 Mandatory: Experience in regulated financial services (banking, brokerage, payments, fintech)
 </li>
 <li>
 Hands-on penetration testing and vulnerability assessment experience
 </li>
 <li>
 Development or DevOps background with practical coding experience
 </li>
 <li>
 Successfully implemented DevSecOps practices and security automation
 </li>
 <li>
 Experience with regulatory audits and compliance assessments
 </li>
 </ul>
 
 
 Required Technical Skills:
 
 
 <ul>
 <li>
 Offensive security tools: Kali Linux, Metasploit, Burp Suite, Nmap, Wireshark, SQLMap
 </li>
 <li>
 Programming: Proficient in Python (prefferable) or atl least one other language
 </li>
 <li>
 Scripting: Mandatory proficiency in Bash, Zsh, and PowerShell
 </li>
 <li>
 Pragmatic security mindset: Balance security with business enablement
 </li>
 <li>
 Collaborative leadership: Build trust with engineering teams
 </li>
 <li>
 Strong communication: Translate security risks into business impact
 </li>
 </ul>
 
 
 
 
 
 Nice to Have:
 
 
 <ul>
 <li>
 Experience with trading platforms, payment systems, or financial infrastructure
 </li>
 <li>
 Knowledge of AI/ML/LLM security considerations
 </li>
 <li>
 Familiarity with MT5, trading APIs, payment processing systems
 </li>
 </ul>
 
 
 
 
 
 Why join CFI?
 
 
 
 &middot; We&rsquo;re a fast-growing, multinational company
 
 
 &middot; Competitive salaries and benefits
 
 
 &middot; Work and learn with industry professions
 
 
 &middot; Supportive and collaborative environment
 
 
 &middot; Unlimited opportunities for growth and development
 
</div>

Group Head of Security

Nighthawk Cyber

<div><h1 class="jobSectionHeader">Sr. Cyber Range Engineer</h1>
BENEFIT ELIGIBLE Professional
Security Clearance REQUIRED
Fort Meade/Hanover, MD, US<h4 class="jobSectionHeader"> 
Company Overview</h4>
Nighthawk Cyber is a premier solutions provider, delivering Cybersecurity, Enterprise IT, &amp; Data Analytics Solutions to the Federal, Defense, and Intelligence communities. Headquartered in Orlando, Florida, our team of professionals boasts an array of industry-leading certifications and decades of experience supporting clients across a wide range of domains and environments. Nighthawk offers a sophisticated approach to normalization and integration of various cyber capabilities with a depth of expertise developing, enhancing, integrating, and transitioning operational cyber capabilities.
Nighthawk is a recipient of the Department of Labor Gold Medallion award and the VETS Indexes Award in recognition of our commitment to support the hiring and professional development of U.S. Veterans.
If you want to join a company with strong ethics and a powerful culture committed to mission and personal success, then apply to Nighthawk Cyber today!<h4 class="jobSectionHeader"> 
Position Overview</h4>
We are looking for a Senior Cyber Range Engineer for the Joint Cyber Training Enterprise (JCTE) who will be a subject matter expert for cyber range validation and range control. The successful candidate will be able to provide senior expert guidance on cyber range development and execution, systems administration, cybersecurity, and account management and address ad-hoc customer-related technical requirements and synchronize priorities across the platform&rsquo;s functional areas. The ability to thrive within high pressure situations and drive relevant teams to take the right actions are a must.
The position is full-time on-site in Fort Meade, MD.<h5 class="jobSectionHeader"> 
Responsibilities</h5><ul><li>
Support the execution of cybersecurity training and testing events within cyber ranges.</li><li>
Support the implementation of offensive based cyber range content, to include virtual machines, networks, hardware in the loop, training materials, applications and scenarios.</li><li>
Provide customer facing support for red cell exercise events and develop visual products tracking priorities for small to large multi-national cyber exercise.</li><li>
Assist content developers and managers in the configuration and employment of red cell applications in support of training events and exercises.</li><li>
Support the development, testing, documentation, fielding and support of complex cyber and IT training systems and equipment.</li><li>
Ensure the highest quality of task completion, meeting contractual performance criteria and deliverables in accordance with the contract.</li><li>
Support cyber range event design and execution.</li><li>
Provide subject matter expertise on architecture, authentication and system security.</li><li>
Fulfill regular on-call responsibilities.</li><li>
Drive continuous process improvement across all event activities.</li><li>
Provide expert-level IT, virtual environment, and network support functions.</li><li>
Interact with vendors/users/customers and developers to understand needs and operational requirements changes that will impact the production environment.</li></ul><h5 class="jobSectionHeader"> 
Required Experience/Qualifications</h5><ul><li>
Minimum 6 years of hands-on technical infrastructure (networking/cloud) and virtualization experience (Cisco, AWS, VMware)</li><li>
Must possess CCNA, AWS Certified (Associate Level), VMware VCP-Cloud, or equivalent certs</li><li>
3+ years of experience with CNO/CNE/CND platforms</li><li>
3+ years of experience with cyber training, validation exercises, and working with cyber protection teams (CPTs), including planning, coordinating, and execution.</li><li>
Current DoD 8570 IAT Level II or greater certification such as Security+, GSEC, CISSP or other equivalent certification.</li><li>
Bachelor's degree in a technical discipline such as information technology, computer science, systems or software engineering from an accredited college or university.</li><li>
Intermediate knowledge of the Joint Event Life Cycle (JELC) and defensive and offensive cyber tools</li><li>
Expert working knowledge of networking, to include DNS, routing, basic to advanced TCP/IP skills and troubleshooting.</li><li>
Background in MS, AD, Security Onion, and VMWare.</li><li>
Demonstrated understanding of Red Hat Enterprise Linux (RHEL) Identity Management (IdM) and Single Sign On (SSO) using Lightweight Directory Access Protocol (LDAP).</li><li>
Ability to translate cyber mission force training and mission rehearsal goals into actionable event environments.</li><li>
Must be a self-starter in a fast-paced environment and able to work with a range of engineers holding a diverse set of skills at differing levels of experience.</li><li>
Be sensitive and flexible to the needs and requirements of the customer.</li><li>
Ability to solve technical problems involving a variety of integrated software and hardware platforms.</li><li>
Effective written and oral communication with multiple levels of leadership involving both business and technical sides of the business.</li><li>
Able to prioritize multiple tasks, projects, and demands.</li></ul><h5 class="jobSectionHeader"> 
Preferred Experience:</h5><ul><li>
Intermediate to advanced knowledge of DNS: Authoritative vs. Recursive servers, SOA, NS, MX, A, and CNAME records.</li><li>
Intermediate to advanced knowledge of routing: OSPF static, BGP, route maps, access lists, prefix lists, advertise maps, and route weights.</li><li>
Intermediate to advanced knowledge of exchange: Edge servers, recipient e-mail addressing, mailboxes, auto-configuration for Exchange clients.</li><li>
Intermediate knowledge of Security Onion or Splunk: interface requirements, scalability landmines, Enterprise configurations (sensor and master). VMWare port properties and how they are tied to sensor ports and promiscuous modes.</li></ul><h5 class="jobSectionHeader"> 
Special Requirements/Security Clearance:</h5>
Please note that pursuant to a government contract, this specific position requires U. S. Citizenship status and a TS/SCI security clearance with the ability to successfully pass a CI polygraph if requested. Security Clearance requirements will be specified in the Government's Task Order.
Occasional travel may be required up to 10% of the time.
This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. The above is intended to describe the general contents of and requirements for the performance of this job.<h4 class="jobSectionHeader"> 
Benefits Overview</h4>
Our total compensation package was strategically designed to reward employees with competitive benefits including:<ul><li>
Generous Medical, Dental &amp; Vision Coverage</li><li>
Options for supplemental life, disability, accident, critical illness, pet, and other policies</li></ul><ul><li>
Generous Leave Policy (11 Federal Holidays, 3 weeks PTO, Unlimited Sick Leave, Military Leave, Bereavement and Jury Duty)</li><li>
Tuition Reimbursement (Education &amp; Training)</li><li>
401(k) Matching and no vesting period</li><li>
Employee Assistance Program</li><li>
Referral &amp; Performance bonuses</li></ul></div>

Senior Cyber Range Engineer (Infrastructure/Cloud)

Tabby

<div><h3 class="jobSectionHeader">Description</h3><div> 
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 15 million users choose Tabby to stay in control of their spending and make the most out of their money.</div><div>
 
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 40,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. 
</div><div>Tabby generates over $10 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. 
</div><div>Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $4.5 billion.</div><div>
 
We are thrilled to announce an opportunity for a skilled Information Security Engineer to join our team and play a role in enhancing our security measures by utilizing your abilities and deep knowledge of information security methodologies. Paying attention to details and efficiently solving problems will be crucial in ensuring the safety of Tabby&rsquo;s systems. 
 
The role you will be involved in both operations and important implementation projects contributing to the growth and maintenance of our technology infrastructure. If you have a passion for cybersecurity, possess technical skills and aspire to make a significant impact we strongly encourage you to apply and become an essential part of our dedicated cybersecurity team.</div><h3 class="jobSectionHeader"> 
Key Responsibilities</h3> 
<ul>
<li>
Penetration Testing: Perform Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) for Web, Mobile, and API applications. Plan and conduct Infrastructure Vulnerability Assessment and Penetration Testing of systems, switches, servers, and more.</li>
<li>Adversary Simulation (Red Teaming): Participate in sophisticated Red Team</li>
<li>engagements, emulating real-world threat actor Tactics, Techniques, and Procedures (TTPs) to assess the detection and response capabilities of the Blue Team/SOC.</li>
<li>Vulnerability &amp; Application Security Analysis: Conduct both Dynamic (DAST) and Static (SAST) Application Security Testing, and perform systematic vulnerability assessments using automated tools combined with meticulous manual verification.</li>
<li>Report Development: Produce actionable, high-quality assessment reports that clearly articulate technical findings, business risk, and remediation strategies for both technical implementers and non-technical executives.</li>
<li>Control Evasion &amp; Social Engineering: Conduct controlled offensive testing, including Breach &amp; Attack Simulations (BAS) and targeted phishing campaigns, to assess the resilience and bypassability of technical and human controls.</li>
<li>Tool Development &amp; Reporting: Develop and maintain custom scripts and tools to enhance offensive security capabilities, and produce high-quality, actionable reports detailing discovered threats and validated vulnerabilities on an ongoing basis.</li>
<li>Security Awareness: Experience in conducting phishing simulations and other</li>
<li>awareness exercises to evaluate employee susceptibility to social engineering attacks and provide targeted training to enhance resilience.</li></ul><div></div><h3 class="jobSectionHeader"> 
Skills, Knowledge &amp; Expertise</h3> 
<ul>
<li>
Degree in Information Technology, Computer Science, Software Engineering, or related field</li>
<li>Knowledge of Information Technology security issues and approaches to manage</li>
<li>Information Technology security with a fast paced Fintech environment.</li>
<li>Security Qualification Good to have: Offensive Security Certified Professional (OSCP), GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), CREST Registered Penetration Tester (CRT) or equivalent.</li>
<li>Excellent communication, influencing and stakeholder management skills</li>
<li>2-3 Experience of working across teams to deliver solutions and generate high levels of internal buy-in</li>
<li>Experience of working in a culturally diverse environment</li>
<li>Knowledge of online technologies, payment methods, content delivery networks, REST APIs, microservices, and application development.</li>
<li>Programming and scripting understanding (Bash, Python etc.)</li></ul><div></div><h3 class="jobSectionHeader"> 
About Tabby</h3><div>
Tabby creates financial freedom in the way people shop, earn and save, by reshaping their relationship with money. 
 
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA and Shein use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. 
 
Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest rated, most reviewed, largest and fastest growing app of any fintech in the GCC region. 
 
Tabby launched operations in 2020 and has raised +$1 billion in equity and debt funding from global and regional investors.</div></div>

Information Security Engineer - VAPT (Saudi National)

Search 10000+ Senior offensive security engineer jobs near you this May. New roles added regularly across leading industries. Apply today.