Offensive Security Analyst
Core
Lead and execute penetration tests, adversary emulation exercises, and red team activities to validate security controls and identify vulnerabilities across web applications, APIs, cloud environments, and infrastructure.
Role type
Senior IC offensive security analyst (red team/adversary emulation)
Builds
Attack scenarios, proof-of-concept exploits, technical reports, and automated testing tooling
Domain
Cybersecurity / Offensive Security / Adversary Emulation
Required skills
Penetration testing, adversary emulation, red teaming, exploitation, threat modeling, Python scripting, PowerShell, Bash, MITRE ATT&CK frameworks, offensive security tooling (Burp Suite, Cobalt Strike, Metasploit, Nmap, BloodHound)
Preferred skills
Adversary emulation in large enterprise, cloud environment assessment (AWS, Azure), Purple Team engagements, AI security testing, offensive security certifications (OSCP, CRTO, PNPT, OSEP, GXPN)
Responsibilities
Lead penetration tests and adversary emulation exercises; Develop and execute attack scenarios based on threat intelligence; Analyze findings and produce executive-ready reports; Develop and maintain offensive security tooling and automation scripts; Partner with engineering and cyber defense teams for purple team activities; Provide technical guidance to less experienced analysts
Seniority
Mid-Senior, hands-on IC