As an Offensive Security Engineer, you will be responsible for simulating real-world
cyberattacks to identify vulnerabilities, assess risks, and improve security defenses. You will
work closely with security analysts, DevOps, and IT teams to enhance the organization's
resilience against cyber threats.
Key Responsibilities:
Penetration Testing & Red Teaming
â Conduct advanced penetration testing on web apps, networks, APIs, cloud, and mobile
applications.
â Simulate real-world attack scenarios to evaluate security defenses.
â Perform internal/external network and infrastructure security assessments.
â Execute red team exercises, including phishing simulations and social engineering
campaigns.
â Collaborate with SOC/Security teams to validate monitoring and defense effectiveness.
Vulnerability Research & Exploitation
â Identify, analyze, and exploit vulnerabilities across various systems.
â Develop custom scripts or exploits for proof-of-concept attacks.
â Work with security teams to ensure timely patching and risk mitigation.
Security Tool Development & Automation
â Develop and maintain security testing tools and automation scripts.
â Integrate offensive security techniques into CI/CD pipelines.
â Evaluate vendor security tools and features through controlled attack simulations.
â Build proof-of-concept scenarios to confirm vendor-promoted capabilities function as
intended.
Threat Hunting & Adversary Simulation
â Conduct red team and purple team exercises to test detection & response capabilities.
â Stay ahead of cyber threats by researching latest hacking trends, zero-days, and TTPs.
â Provide actionable intelligence to incident response teams.
Security Reporting & Collaboration
â Document security findings with detailed remediation steps.
â Work with engineering teams to implement security best practices.
â Contribute to security awareness training within the company.