Offensive Security Engineer/Penetration Tester
Core
Conduct manual and automated penetration tests, red team exercises, and adversary simulations to identify and validate vulnerabilities across applications, networks, systems, and infrastructure.
Role type
Senior IC offensive security engineer (penetration tester)
Builds
Security assessments, penetration test reports, and actionable remediation guidance
Domain
Cybersecurity / Offensive Security
Required skills
Penetration testing, ethical hacking, network protocols, operating systems, application security, attack techniques, manual testing, automated vulnerability assessments, red teaming, adversary simulation, OWASP Top 10, MITRE ATT&CK, vulnerability validation, technical documentation, remediation guidance
Preferred skills
OSCP, GPEN, GWAPT, CEH certifications, enterprise environment experience, cloud security testing (AWS, Azure, GCP), scripting/automation (Python, PowerShell, Bash), vulnerability management
Technologies
Burp Suite, Metasploit, Nmap, Nessus, AWS, Azure, Bash, Python, PowerShell, OWASP, MITRE ATT&CK
Responsibilities
Plan and conduct manual and automated penetration tests; Assess security to uncover exploitable vulnerabilities and misconfigurations; Participate in red team exercises and simulated attacks; Analyze potential attack paths and assess vulnerabilities; Prepare comprehensive penetration test reports; Work with engineering and security teams to address vulnerabilities; Perform validation testing to verify remediation effectiveness; Research emerging threats and tools; Present findings to stakeholders
