Senior Offensive Security Expert - Cloud

Summary/Overview

The Senior Offensive Security Expert will be joining our engineering team and reporting to the Senior Engineering Manager - Attack. The Senior Offensive Security Expert will be responsible for attack content development and data model architecture enhancement. The candidate being sought should be a creative, self-motivated, highly energetic, results and detail oriented individual passionate about offensive cyber security, software development, product development, and architectural design. 

Essential Functions

• Collaborate with the Attack Team Technical Manager to enhance product architecture, design, and coding by incorporating new attack content.
• Monitor production operations for errors and missed opportunities, promptly creating Jira bug tickets as needed.
• Lead red team operations to find the latest misconfigurations and vulnerabilities in Azure and AWS to identify and prioritize cloud based improvements to the platform.
• Collaborate with the systems engineering team to improve infrastructure and design as needed. 
• Extend platform architecture, design, and data model to accommodate evolving attack methodologies.
• Integrate and develop open-source and in-house attack tools and techniques into the product framework.
• Take ownership of resolving bugs associated with developed content.
• Conduct comprehensive testing, maintenance, and enhancement of individual code quality.
• Adhere to and contribute to the enhancement of technical and developmental processes within the Attack Team.
• Contribute to publishing blog posts related to novel attack techniques and new exploits.
• Liaising with the Go-to-Market and Customer Success departments to address customer/prospect questions or inquiries, concerns, and bug reports regard Attack Team deliverables.

Competencies

• Extensive experience and expertise in solution design and flow, with a deep understanding of platform architecture and functionality.
• Extensive experience in penetration testing cloud and web applications with a deep understanding of how to find and identify attack vectors.
• Proficient in managing multiple concurrent initiatives with sound judgment in prioritization and exceptional time management skills.
• Demonstrates creativity, self-motivation, highly energetic, and a keen eye for detail and a relentless drive for achieving results.
• Possesses excellent analytical and problem-solving abilities, capable of addressing complex challenges effectively.
• Exhibits strong influence, negotiation, and relationship management skills to foster collaboration and drive successful outcomes.
• Skilled in technical documentation and communication, ensuring clarity and coherence in conveying complex concepts.
• Recognized as a subject matter expert in platform design and flow, contributing valuable insights and guidance.
• Adaptable and quick to learn, with a proven ability to master new technologies as needed to support project objectives.

Required Education/Experience 

• Bachelor’s and/or Master's degree in Business Administration, Commerce, Computer Science, Engineering, or STEM related field.
• Proficient in utilizing multiple Operating systems such as Kali, Ubuntu, and Windows.
• Hands-on experience in developing SaaS applications on cloud computing platforms like AWS, Azure, and GCP. 
• Familiarity with relational and graph databases.
• Highly proficient with scripting and developing in Python. 
• Knowledge and experience with various technologies used within the team’s ecosystem such as Gitlab CI, Docker, and Sonarcube.

Preferred Education/Experience

• Cyber security related certifications/designations, such as: 
  • Offensive Security Certified Professional (OSCP) 
  • Certified Information Systems Security Professional (CISSP) 
  • GIAC Penetration Tester (GPEN) 
  • Offensive Security Expert Penetration Tester (OSEP)
• Extensive architectural management experience.
• Exposure and/or experience with cyber security industry standards and trends.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice. 

Travel Required 

We are a fully remote company, and this job may require up to 5% of travel to be successful. Job-related travel expenses are reviewed and must be approved by your manager.

Why H3

• Competitive Compensation: We o