Offensive Security Engineer

About the role

We are seeking an Offensive Security Engineer to strengthen our cybersecurity defenses by proactively identifying vulnerabilities and simulating real‑world attacks across a complex digital environment. The role is remote‑first and will collaborate closely with security operations, infrastructure, network, and IT teams.

Key responsibilities

• Monitor, map, and assess the external attack surface, including domains, subdomains, public IP ranges, and DNS configurations.
• Conduct penetration testing, vulnerability assessments, and reconnaissance on external‑facing systems and infrastructure.
• Perform adversary emulation exercises to validate EDR, XDR, and security monitoring solutions.
• Assess office infrastructure, network devices, physical hardware, and internal edge systems.
• Execute scoped testing on web applications and public APIs, providing remediation guidance.
• Translate technical findings into actionable reports, remediation plans, and security improvements.
• Develop repeatable security checks, improve asset tracking, and maintain visibility into exposure trends.
• Support continuous improvement of offensive security practices through automation and knowledge sharing.

Required profile

• Proven experience in offensive security, penetration testing, vulnerability assessments, network security, or adversary emulation.
• Strong understanding of external attack surface management, DNS security, and network reconnaissance techniques.
• Hands‑on experience testing Linux and Windows environments, including network services and infrastructure components.
• Experience performing adversary simulations and evaluating modern endpoint detection and response platforms.
• Familiarity with testing routers, switches, firewalls, corporate networks, and workplace IT infrastructure.

Required skills

• Penetration testing
• Vulnerability assessment
• Network reconnaissance
• DNS security
• Attack surface management
• Linux and Windows environments
• EDR/XDR evaluation
• Router, switch, and firewall testing
• Corporate network security