Offensive Security Engineer

What is the job

As an Offensive Security Engineer, you will be an integral part of our cybersecurity team, responsible for identifying and proactively mitigating potential security threats and vulnerabilities within our organization's systems, applications, and infrastructure. Your primary focus will be on conducting Red and Purple team exercises to simulate real-world cyber-attacks, allowing us to identify weaknesses and improve our overall security posture. By applying your expert knowledge of offensive security techniques, tools, and methodologies, you will play a crucial role in safeguarding our sensitive data and protecting our digital assets.

Joining our team as an Offensive Security Engineer will provide you with the opportunity to make a significant impact on our organization's security resilience. You will work with a passionate and dedicated cybersecurity team to protect critical assets, and contribute to the ongoing improvement of our cybersecurity practices.

Responsibilities

• Plan and lead Red and Purple team engagements focused on testing the organization's security controls and measures
• Develop Custom Tools that support offensive security engagements and provide technical capabilities to improve the efficiency of the team
• Collaborate with Security Partners to align remediation efforts that enhance the organization's overall security posture
• Stay up-to-date with the latest cybersecurity threats, exploits, tools, and best practices to continually improve offensive security testing methodologies
• Conduct assessments of security controls effectiveness and resilience with continuous verification with automation

Requirements

• Experience in one or more cloud environments and services specifically AWS, GCP or Azure
• Demonstrate proficiency in offensive security techniques, tools, and methodologies across the attack lifecycle
• Experience in one or more programming languages like Python, Golang, or others to develop custom tools and scripts
• Experience in Red Team Operations end-to-end and tasking other Red Team operators
• Experience developing custom and existing tools to support offensive security teams
• Experience setting up automated virtualized and test environments emulating the target environments
• Knowledge and understanding of attack surfaces for enterprise systems and services
• Experience in performing Black, Grey and White box Penetration Testing
• Advanced knowledge and understanding in various disciplines: web application security, mobile app security, network security, operating system internals and hardening, cloud computing. You're expected to be an expert in at least one of these areas
• Certifications such as OSCP, CEH, would be beneficial