Senior Offensive Security Engineer
New
J
JobgetherCybersecurity
Remote working arrangement based in IndiaFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 5 years of hands-on professional experience in offensive security, penetration testing, red teaming, or a closely related security engineering discipline.
- Required Skills
- AWSPythonMicrosoft Azure
Requirements
- At least 5 years of hands-on professional experience in offensive security, penetration testing, red teaming, or a closely related security engineering discipline.
- Experience assessing web and mobile applications, APIs, networks, infrastructure, and cloud environments.
- Strong understanding of vulnerability assessment, ethical hacking, security validation, and authorized adversary simulation.
- Experience evaluating complex environments and the combined risk of multiple security weaknesses.
- Familiarity with tools such as Burp Suite Professional, Nmap, Metasploit, Kali Linux, and vulnerability scanning solutions.
- Proficiency in at least one scripting or programming language, such as Python, Go, PowerShell, Ruby, or Bash.
- Working knowledge of the MITRE ATT&CK framework and adversary tactics, techniques, and procedures.
- Experience with cloud security assessments, particularly AWS and/or Microsoft Azure.
- Strong understanding of security operations, vulnerability management, detection engineering, and incident response.
- Familiarity with controlled testing environments, responsible vulnerability validation, and security testing policies.
- Strong analytical and problem-solving abilities and the ability to communicate technical findings and business risks.
- Ability to work independently, manage multiple initiatives, and collaborate with cross-functional teams.
Responsibilities
- Plan and conduct authorized security assessments across web and mobile applications, APIs, cloud environments, networks, and infrastructure.
- Design and coordinate red team engagements and adversary simulation exercises.
- Collaborate with SOC, Threat Intelligence, Threat Hunting, and Detection Engineering teams to assess detection capabilities and incident response readiness.
- Identify and validate security weaknesses, assess business impact, and provide actionable remediation recommendations.
- Prioritize vulnerabilities by exploitability and business risk, coordinate remediation, and track progress through follow-up assessments.
- Develop and maintain approved security testing scripts, tools, and automation solutions.
- Prepare technical reports and executive summaries, and communicate findings to technical teams, GRC, Audit, and senior leadership.
- Support incident response and threat hunting with offensive security expertise.
- Develop assessment methodologies, operational playbooks, and performance metrics, and mentor junior security engineers.
View Full Description & ApplyYou'll be redirected to the employer's site