Analyst - Offensive Security

As an Offensive Security Analyst, you will be part of the Offensive Security Team responsible for identifying, assessing, and reporting security vulnerabilities across Lulu Retail s technology environment. You will support offensive security activities, including vulnerability assessments, penetration testing, cloud security reviews, and remediation tracking, helping strengthen the organizations cybersecurity posture and resilience.

Essential Duties Responsibilities
- Perform vulnerability assessments across network, server, endpoint, cloud, mobile application, and web application environments.
- Conduct security testing activities, including Internal External Penetration Testing, Web Application Testing, Wireless Security Assessments, API Security Testing, Mobile Application Testing, and Active Directory Security Reviews.
- Execute PCI-DSS ASV scans and other security compliance-related assessments.
- Identify, validate, document, and risk-rate security vulnerabilities, misconfigurations, and CVE exposures.
- Support cloud security assessments for AWS and Azure environments and recommend remediation measures.
- Prepare detailed technical reports outlining vulnerabilities, business impact, exploitability, and remediation recommendations.
- Track remediation activities and work with infrastructure, application, cloud, and business teams to ensure timely closure of identified findings.
- Maintain assessment documentation and testing evidence, while staying current with emerging threats, attack techniques, and offensive security best practices.

Qualifications:

• Bachelors degree in Computer Science or a related field.

• 1-2 years of experience in cybersecurity, vulnerability management, or penetration testing.

• Knowledge of security testing tools such as Nessus, Qualys, Burp Suite, Nmap, Wireshark, and Metasploit.

• Understanding of OWASP, NIST, PCI-DSS, ISO 27001, and cloud security concepts.

• Strong analytical, reporting, communication, and collaboration skills.

Preferred Certifications: CEH, ECSA, CHFI, or equivalent cybersecurity certifications.