Senior Security Engineer

Description

We are seeking a skilled and experienced Senior Security Engineer to join our Offensive Security team. In this role, you will perform advanced penetration testing, simulated attack campaigns, and red team exercises to identify, exploit, and report on security vulnerabilities. As a Senior Security Engineer, you will lead technical assessments, mentor Tier 1 team members, and contribute to the development of tools and methodologies to emulate advanced threat actor tactics, techniques, and procedures (TTPs).

Responsibilities

Advanced Offensive Security Operations

• Perform comprehensive penetration testing on networks, applications, and systems to uncover and exploit complex vulnerabilities.
• Lead simulated adversarial attack methods, including phishing, lateral movement, privilege escalation, and exfiltration.
• Emulate sophisticated threat actors using frameworks such as MITRE ATT&CK, Kill Chain, and TIBER-EU.
• Develop custom scripts, exploits, and tools to support advanced Red Team operations.
• Provide detailed post-assessment reports with technical findings, risk analysis, and actionable remediation recommendations.
• Lead incident response efforts 

Incident Simulation and Collaboration

• Collaborate with Blue Team and SOC teams to test incident detection and response capabilities during red/blue/purple team exercises.
• Conduct stealthy operations to test organizational defenses while maintaining operational integrity.
• Validate and refine defensive controls by simulating real-world attack scenarios.
• Collaborate with sales to provide security recommendations and scopes of work. 

Mentorship and Knowledge Sharing

• Mentor Tier 1 engineers by providing technical guidance, hands-on training, and support during assessments.
• Assist in developing internal playbooks, attack scenarios, and operational guides for Red Team activities.

Continuous Improvement and Research

• Research and stay updated on emerging attack vectors, vulnerabilities, and threat actor behaviors.
• Proactively improve Red Team tactics, techniques, and tools to ensure cutting-edge offensive capabilities.
• Collaborate with the development of automation scripts and frameworks to streamline Red Team operations.
• Performs additional duties as assigned

Requirements

Education and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, or a related field (or equivalent experience).
• 3-5 years of hands-on experience in penetration testing, red teaming, or offensive security operations.
• Proven track record of identifying and exploiting complex security vulnerabilities.

Technical Skills

• Advanced knowledge of penetration testing tools (e.g., Metasploit, Cobalt Strike, Burp Suite, Nmap, Nessus, Wireshark).
• Proficiency in scripting and automation with languages such as Python, PowerShell, or Bash.
• Deep understanding of networking protocols (e.g., TCP/IP, DNS, VPN, HTTP) and operating system internals (Windows, Linux, macOS).
• Experience with advanced exploitation techniques, lateral movement, and persistence mechanisms.
• Strong familiarity with threat modeling and attack frameworks like MITRE ATT&CK, OWASP Top 10, and Cyber Kill Chain.
• Hands-on experience with Active Directory and cloud environments (e.g., AWS, Azure, GCP).

Certifications (Preferred)

• OSCP (Offensive Security Certified Professional), OSWE, or OSEP.
• GIAC certifications such as GPEN, GWAPT, or GXPN.
• Relevant certifications like CEH or CompTIA PenTest+ are a plus.

Key Competencies:

• Strong analytical and problem-solving skills with a creative and proactive mindset.
• Ability to manage multiple offensive security engagements simultaneously.
• Excellent verbal and written communication skills, with the ability to deliver technical findings to both technical and non-technical audiences.
• Team player with a passion for offensive security and ethical hacking.
• Highly organized with strong attention to detail and a commitment to operational security and confidentiality.

Work Environment:

• May involve off-hours operations for stealthy assessments or simulations.
• Collaborative, team-oriented environment with opportunities for professional development and certifications.
• Access to a wide range of cutting-edge tools and frameworks for offensive security.

Physical Demands

While performing the duties of this job, the employee uses his/her han