Security Engineer - Offensive Security

Key Responsibilities

• Plan, spearhead and execute sophisticated adversary simulation activities to enable the identification and mitigation of identified vulnerabilities 
• Research, develop, and apply offensive tactics, techniques, and procedures (TTP´s) to effectively mimic the capabilities of relevant threat actors
• Provide subject matter expertise in offensive security for cyber defenders, remediation teams and enterprise technology teams
• Develop tooling to support reconnaissance, automation, and metrics collection
• Conduct full exploitation within multiple environments, including complex Active Directory and mixed Windows, *nix and MacOS environments 
• Develop comprehensive, accurate reports targeting both technical and executive audiences
• Define and maintain a set of Standard Operating Procedures (SOP), Rules of Engagement (ROE), Methodologies and checklist for Red and Purple Team operations
• Excellent communication and presentation skills to communicate levels of risk as well as solutions to reduce risk most accurately and effectively in a prioritized manner

Person Specifications

• 3+ years of experience performing vulnerability assessments 
• Excellent understanding of OWASP Top 10 vulnerabilities and it's mitigations
• Clear understanding of networking fundamentals: OSI layers, TCP/IP, protocols, etc
• Experience working on a GNU/Linux based penetration testing operating system and the command line (such as Kali Linux, Parrot, BlackArch, etc.)
• Experience with security testing tools and tradecraft. Must have an in depth understanding of common concepts relating to Command and Control (C2) frameworks and their development/customization/use
• Ability to modify known and/or craft custom exploits manually without dependence on consumer tools such as Metasploit
• Ability to modify known and/or craft custom exploits manually without dependence on consumer tools such as Metasploit
• Good spoken and written English skills

Nice To Have

• Security certifications: OSCP, OSCE, CRTP, GIAC certs or equivalent
• Working knowledge of Tenable security solutions
• Knowledge of Windows penetration testing: Active Directory, Azure AD
• CVE publications, knowledge of exploit development
• Talks/workshops organized at security conferences
• Excellent bug bounty track record
• Open-source contributions made to security tools, scripts & solutions
• Development background and code review capabilities