Offensive Security Engineer/Penetration Tester

We are an established organization seeking to expand our cybersecurity capabilities and strengthen our approach to identifying, assessing, and mitigating security risks. Our technology environment offers a wide range of technical challenges and opportunities to work with modern security tools, evolving technologies, and complex systems.

We value individuals who are proactive, technically curious, and passionate about cybersecurity. Our team takes a collaborative, hands-on approach to identifying vulnerabilities and implementing meaningful security improvements.

Why join us?

Hands-On Technical Work: Take an active role in penetration testing, offensive security assessments, and identifying exploitable vulnerabilities.

Variety of Security Challenges: Work across applications, networks, infrastructure, and modern technology environments.

Collaborative Culture: Partner with experienced security professionals and technical teams to identify risks and improve security controls.

Opportunity for Impact: Contribute directly to strengthening organizational security through actionable findings and remediation efforts.

Professional Growth: Gain exposure to evolving attack techniques, security technologies, and offensive security methodologies.

Job Details

Key Responsibilities

Plan and execute manual and automated penetration testing engagements across applications, networks, systems, and infrastructure.

Conduct security assessments to identify exploitable vulnerabilities, misconfigurations, and weaknesses in existing security controls.

Participate in red team exercises and simulated attack scenarios to evaluate security defenses.

Analyze potential attack paths and assess vulnerabilities based on exploitability, likelihood, and potential business impact.

Develop comprehensive penetration testing reports, including technical findings, risk assessments, and actionable remediation recommendations.

Collaborate with infrastructure, engineering, development, and security teams to address identified vulnerabilities.

Conduct validation testing to confirm the effectiveness of remediation efforts.

Research emerging threats, attack techniques, vulnerabilities, and offensive security tools.

Support ongoing security improvement initiatives designed to reduce risk and strengthen defensive capabilities.

Present findings and recommendations to technical and nontechnical stakeholders.

Professional experience in penetration testing, ethical hacking, offensive security, or related cybersecurity disciplines.

Strong understanding of network protocols, operating systems, application security, and common attack techniques.

Experience conducting both manual penetration testing and automated vulnerability assessments.

Familiarity with offensive security methodologies, red team exercises, and adversary simulation.

Understanding of OWASP Top 10, MITRE ATT&CK, and industry-standard security testing methodologies.

Hands-on experience with security testing tools such as Burp Suite, Metasploit, Nmap, Nessus, or comparable technologies.

Ability to identify, validate, and explain security vulnerabilities and potential attack paths.

Experience preparing technical documentation and actionable remediation recommendations.

Strong analytical, troubleshooting, and communication skills.

Preferred Qualifications

Certifications such as OSCP, GPEN, GWAPT, CEH, or comparable credentials.

Experience conducting penetration testing within enterprise technology environments.

Familiarity with cloud security testing across AWS, Azure, or Google Cloud.

Scripting or automation experience with Python, PowerShell, Bash, or similar languages.

Exposure to vulnerability management, security assessments, or broader cybersecurity risk reduction initiatives.