Cybersecurity Offensive Security Specialist

About the role

The Cybersecurity Offensive Security Specialist conducts advanced security assessments, penetration testing, red team operations and security reviews across web applications, APIs, mobile apps, networks, cloud environments, IoT devices and OT systems. The role identifies vulnerabilities, validates security controls, simulates real-world attacks and provides actionable remediation advice.

Key responsibilities

• Red teaming: run adversary emulation exercises, MITRE ATT&CK-aligned scenarios, phishing and social engineering campaigns, SOC/SIEM/EDR assessments, custom PoC exploits and purple team exercises.
• Penetration testing: black-box, gray-box and white-box tests of internal and external networks, Active Directory, Windows/Linux, databases, virtualization, cloud and re-testing.
• Web app security: OWASP methodology, manual exploitation of SQL injection, XSS, authentication flaws, CSRF, file upload and business logic issues.
• API security: REST, SOAP, GraphQL and microservices testing for broken authorization, SSRF, JWT weaknesses and API abuse, plus gateway and documentation review.
• Mobile security: Android and iOS static/dynamic assessments, reverse engineering, SSL pinning bypass, data leakage and root/jailbreak detection testing.
• IoT security: firmware, wireless protocols, authentication, embedded OS and configuration assessments.
• Reporting: technical and executive reports, stakeholder presentations, remediation guidance, tracking and validation of fixes.

Required profile

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering or a related field.
• 4+ years of hands-on penetration testing experience.
• Proven experience in red teaming, web/API/mobile/IoT-OT security assessments.
• Preferred certifications: OSCP, PNPT, CRTO, OSWE, eWPT, XMAP, TCG, GRC, GPENG, WAPT, CART.

Required skills

• Red teaming, threat emulation, MITRE ATT&CK, OWASP Top 10 and API Top 10
• Burp Suite Professional, Postman, MobSF, Frida, Objection, APKTool, JADX
• Active Directory, Windows, Linux, network, wireless, IoT and OT security
• Firmware analysis, Python, PowerShell, Bash, API automation