Offensive Security Analyst

Responsibilities: Lead and execute penetration tests, adversary emulation exercises, and red team activities Assess web applications, APIs, cloud environments, identity platforms, infrastructure, and emerging technologies Simulate attacker behaviors to identify vulnerabilities and attack paths Validate security controls through exploitation and PoC testing Support threat-led operations aligned to organizational risk priorities Develop and execute attack scenarios based on threat intelligence and MITRE ATT&CK Research emerging attack techniques and contribute to testing methodologies Analyze findings, produce technical and executive reports, and present remediation strategies Develop and maintain offensive security tooling, scripts, and testing frameworks Automate repetitive testing and reporting, contribute to OSFT capability development Collaborate with engineering, app security, cyber defense, and other teams; participate in purple team activities Contribute to testing standards, playbooks, and best practices Maintain awareness of evolving threat landscapes and industry practices

Key requirements: 3–5+ years of offensive security, penetration testing, red teaming, or related cybersecurity experience Experience assessing web apps, infrastructure, cloud, and identity environments Strong understanding of attacker methodologies and offensive tradecraft Experience with Burp Suite, Cobalt Strike, Metasploit, Nmap, BloodHound, Impacket or equivalent tools Working knowledge of MITRE ATT&CK and threat-informed testing Proficiency in Python, PowerShell, Bash, or similar scripting languages Strong written and verbal communication skills communication collaboration ability to convey complex findings to stakeholders Burp Suite Cobalt Strike Metasploit