Offensive Security Specialist (m/f/d)

Cyber threats are evolving faster than ever, and organizations need offensive security experts who can stay one step ahead. As an Offensive Security Specialist, you will play a critical role in strengthening the cyber resilience of one of the world's leading global shipping and logistics companies.

You'll execute sophisticated penetration tests, simulate real-world attack scenarios, and uncover security weaknesses across modern enterprise environments. Your work will span traditional IT infrastructure, cloud platforms, identity ecosystems, web applications, APIs, operational technology (OT), and emerging AI-powered systems.

You will collaborate closely with security testing, threat intelligence, vulnerability management, and detection engineering teams to transform offensive findings into meaningful security improvements. If you're passionate about ethical hacking, enjoy solving complex technical challenges, and thrive in an environment where your expertise directly influences security strategy and risk reduction, we'd love to hear from you.

• Execute penetration tests and red team engagements across infrastructure, cloud environments, applications, APIs, and operational technology systems
• Simulate real-world attacker behaviors to identify exploitable attack paths and validate organizational resilience
• Assess security controls across Active Directory, Entra ID, privileged access management solutions, and machine identities
• Conduct web application, API, and cloud security assessments using leading offensive security methodologies
• Perform ransomware, supply chain, and adversary simulation exercises to test detection, response, and recovery capabilities
• Validate the real-world impact of vulnerabilities and support accurate risk prioritization through practical exploitation testing
• Develop and maintain offensive security tooling, automation scripts, and testing infrastructure
• Produce high-quality reports with actionable remediation recommendations and present findings to both technical and business stakeholders

• Bachelor’s or Master’s degree in Cybersecurity, Information Technology, Computer Science, or a related field
• Several years of hands-on experience in penetration testing, red teaming, or offensive security within complex enterprise environments
• Strong expertise in network, identity, cloud, application, and API security testing
• Solid experience with Active Directory, Entra ID, privilege escalation techniques, and identity-focused attack paths
• Deep understanding of attacker tactics, techniques, and procedures (TTPs) and frameworks such as MITRE ATT&CK
• Experience conducting security assessments of modern cloud platforms and hybrid environments
• Strong scripting or development skills used to automate, customize, or enhance offensive security activities
• Excellent analytical and communication skills, with the ability to translate complex technical findings into business-relevant insights
• Professional certifications such as OSCP, OSEP, PNPT, CRTO, or comparable offensive security credentials are highly valued