Senior Offensive Security Engineer

Title: Senior Offensive Security Engineer

Timings: Evening/Night shift (6pm-3am OR 7pm-4am)

Reports to: Team Lead Cyber Security

Location: Remote

About the Role

We are looking for an experienced Senior Offensive Security Engineer to join our security team. In this role, you will lead and execute penetration tests and adversary simulation engagements across our applications, networks, and cloud environments. You will act as a technical authority on offensive security, mentor junior engineers, and work closely with engineering and leadership teams to identify and reduce real-world risk.

Key Responsibilities

• Plan, scope, and lead end-to-end penetration tests across web applications, APIs, mobile, internal/external networks, and cloud environments

• Conduct red team and adversary simulation exercises aligned with the MITRE ATT&CK framework

• Identify, validate, and safely exploit vulnerabilities, including chaining issues to demonstrate business impact

• Perform manual code reviews and drive improvements to SAST, DAST, and SCA tooling and processes

• Develop custom scripts, tools, and automation to improve testing efficiency and coverage

• Write high-quality technical and executive-level reports with clear risk ratings and actionable remediation

guidance

• Partner with development and infrastructure teams to prioritize, track, and verify remediation

• Mentor and guide junior engineers, review their findings and reports, and help build team capability

• Contribute to threat modeling, secure design reviews, and security architecture discussions

• Research emerging threats, CVEs, and attacker techniques, and translate them into testing methodology

Required Qualifications

• 4–5 years of hands-on experience in penetration testing, red teaming, or offensive security

• Bachelor's degree in Computer Science, Cybersecurity, IT, or equivalent practical experience

• Strong understanding of networking, operating systems (Windows, Linux), and Active Directory attack

techniques

• Deep knowledge of OWASP Top 10, OWASP API Security Top 10, and common vulnerability classes

• Advanced proficiency with offensive tools such as Burp Suite Pro, Nmap, Metasploit, BloodHound, Impacket, and C2 frameworks

• Solid scripting and development skills (Python, Bash, PowerShell, or Go)

• Proven experience writing clear, professional penetration test reports for technical and non-technical audiences

• Strong understanding of responsible disclosure, rules of engagement, and ethical testing practices

Preferred Qualifications

• Advanced certifications such as OSCP, OSEP, OSWE, CRTO, CRTP, GPEN, or GXPN

• Hands-on experience with cloud security testing in AWS, Azure, or GCP

• Experience with container and Kubernetes security assessments

• Published CVEs, security research, conference talks, or open-source security tools

• Strong track record on platforms like HackTheBox, TryHackMe, or bug bounty programs

• Experience building or leading an internal red team or offensive security program

What You Bring to the Team

• Technical leadership on complex engagements, from scoping through final reporting

• An attacker's mindset that uncovers risks automated tools miss

• Mentorship that raises the skill level and confidence of junior engineers

• The ability to translate technical findings into business risk for leadership

• Repeatable methodologies, playbooks, and tooling that strengthen the offensive security function

• Strong collaboration with engineering teams to build security into products early

What We Offer

• Competitive compensation aligned with senior-level experience

• Ownership of high-impact offensive security engagements and influence on security strategy

• Dedicated budget and time for advanced certifications, training, and conferences

• Time allocated for security research and tool development

• Access to modern offensive tooling, labs, and cloud environments

• A clear career path toward Lead, Principal, or Red Team Lead roles

• A collaborative, growth-oriented security team culture