Security Engineer

About The Role

We are looking for a Security Engineer to join our offensive security team. You will conduct manual penetration testing engagements across web applications, mobile platforms, and network infrastructure, helping clients identify and remediate vulnerabilities before they can be exploited. No compliance checklists, no automated-only scans. We do real adversarial testing.

Core Responsibilities

• Perform manual penetration testing on web applications, APIs, mobile apps, and internal network infrastructure.
• Identify and chain vulnerabilities to demonstrate real business impact, from low-risk findings to full compromise.
• Write clear, detailed, and actionable pentest reports with reproducible proof-of-concept steps and remediation guidance.
• Communicate findings directly to technical and non-technical stakeholders.
• Participate in retesting engagements to verify remediation effectiveness.
• Continuously research new attack techniques and keep skills current with the threat landscape.
  
  

Technical Skills

• Solid understanding of OWASP Top 10 and common vulnerability classes (SQLi, XSS, IDOR, SSRF, broken auth, etc.).
• Hands-on experience with Burp Suite, Nmap, Metasploit, and other standard pentest tooling.
• Ability to perform both black-box and grey-box assessments.
• Basic scripting ability in Python or Bash to automate repetitive tasks.
• Familiarity with network protocols (HTTP/S, DNS, SMB, etc.) and common infrastructure components.
  
  

Experience & Credentials

• Prior hands-on penetration testing experience (professional engagements, bug bounty, CTF, or lab-based).
• Any offensive security certification is a plus (OSCP, CEH, eJPT, PNPT, or equivalent).
• Strong written communication skills. Pentest reports are a core deliverable.
  
  

Operational Benefits

• Hardware budget for workstation and pentest tooling.
• Paid certifications and training (OSCP, OSWE, or equivalent).
• Flexible remote-first working arrangement.
• Direct exposure to real-world engagements from day one.