Offensive Security Engineer (Cybersecurity)
Job Description
Main Purpose of Job:
As an Offensive Security Officer, you'll conduct vulnerability assessments and penetration tests across our business units and subsidiaries, working both independently and as part of a team. You'll dig into software applications, business processes, and operational networks to uncover hidden risks and help keep our systems secure.
Key Experiences:
- Bachelor's degree in Computer Engineering, Computer Science, Information Security, or a related field, or equivalent practical experience.
- 0-2 years of experience in a technical security role, penetration testing, or a similar background — recent graduates are encouraged to apply.
- Open-minded and collaborative, with strong communication skills.
- Detail-oriented and able to stay focused and patient under pressure.
- Curious and proactive about keeping up with new cybersecurity technologies and techniques.
- Holds, or is actively working toward, SANS GPEN, OSCP, or an equivalent certification.
Functional or Professional / Business Skills:
- Basic understanding of IT infrastructure (on-premises and cloud), operating systems (Unix, Windows, iOS, and Android), and core networking concepts (TCP/IP, Ethernet).
- Familiarity with at least one programming or scripting language, such as PowerShell, Python, Java, JavaScript, PHP, or C/C++/C#.
- Genuine interest in offensive security, with a mindset geared toward thinking like an attacker.
- Exposure to penetration testing tools such as Nmap, Nessus, Metasploit, Burp Suite, Nikto, Tcpdump, or BloodHound, gained through coursework, labs, CTFs, or personal projects.
- Basic knowledge of penetration testing frameworks such as MITRE ATT&CK and OWASP.
- Strong verbal and written communication skills, with the ability to explain technical findings clearly.
