Offensive Security Engineer

About the role

We are looking for an analytical Offensive Security Engineer to lead proactive security testing of modern web, mobile and cloud applications. You will work closely with development, DevOps and security teams to identify, exploit and remediate vulnerabilities, helping to protect our business‑critical solutions.

Key responsibilities

• Plan, scope and execute penetration tests across web, mobile and cloud environments.
• Identify, exploit, validate and document security flaws using manual and automated techniques.
• Develop testing strategies aligned with security objectives and compliance requirements.
• Leverage threat intelligence, attacker TTPs and emerging trends to improve methodologies.
• Collaborate with application owners, DevOps and security engineers throughout the assessment lifecycle.
• Produce clear, actionable security reports with findings, risk assessments and remediation guidance.
• Assist engineering teams in validating fixes and enhancing overall security posture.

Required profile

• 3+ years of hands‑on penetration testing or offensive security experience.
• Experience testing web, mobile and cloud‑based applications.
• Strong analytical, troubleshooting and problem‑solving abilities.
• Excellent written and verbal communication in English.
• Relevant certifications (OSCP, OSWE, GPEN, etc.) are a plus.

Required skills

• Penetration testing of web, mobile and cloud applications.
• Vulnerability research and exploitation techniques.
• Proficiency with Burp Suite, Metasploit, Nmap and custom scripting.
• Knowledge of Threat Intelligence and the MITRE ATT&CK framework.