Offensive Security Engineer

Cyberbit Range is the world’s leading cybersecurity training platform for cyber professionals, with clients spanning Fortune 500 companies, universities, governments, and militaries globally. Fascinated by the challenge? Join us!

As an Offensive Security Engineer, you’ll be designing and developing dynamic red team content for our Cyberbit Range Readiness Platform, crafting Capture the Flag (CTF) challenges, hands-on labs, theoretical units, and more. This role blends cloud-based and non-cloud scenarios, where you’ll also build and deploy Docker-based environments to simulate real-world cyber threats.

Key Responsibilities

• Design, build, and implement red team labs, vulnerable websites, CTF challenges, and exercises tailored for varying skill levels, covering offensive security concepts, AWS-based infrastructure, and Docker deployments.
• Create realistic challenges across domains such as network exploitation, application security, penetration testing, and vulnerabilities, leveraging cloud and on-prem environments.
• Create scripts and frameworks for IaaC setup and collaborate with platform engineers to integrate content within the Cyberbit Range platform using containerized applications, the most common attack tools, and various OSs.
• Develop detailed walkthroughs and solutions for each challenge and maintain accurate documentation outlining objectives and content descriptions.
  
  

• Minimum of 5 years of experience in cybersecurity, with at least 2 years in offensive security roles.
• Experience with industry-standard offensive security tools and frameworks (e.g., Metasploit, Cobalt Strike, Burp Suite, BloodHound, Mimikatz, Impacket, etc).
• Experience in scripting and/or programming (e.g., PowerShell, Python).
• Knowledge of procedures, policies, and common industry best practices in offensive security.
• Experience in writing comprehensive technical, security, finding, and methodology reports.
• Outstanding English proficiency, both verbal and written.
• Experience with cloud environments (AWS, Azure, or GCP) and cloud-specific offensive tactics - advantage.