Cybersecurity Analyst (Internal Penetration Testing)

Responsibilities:

• Develop, implement and maintain penetration testing, Red Team and offensive security tools for global cybersecurity operations.
• Conduct internal and external penetration tests across infrastructure, applications, networks, cloud and Active Directory environments.
• Develop scripts, automation, frameworks and internal tools to improve the efficiency and scalability of penetration testing activities.
• Conduct proactive Red Team exercises to simulate real-world external adversaries and insider threats.
• Identify vulnerabilities, attack paths and weaknesses in organizational security controls.
• Perform security assessments of third-party services, applications and software.
• Conduct source-code reviews to identify security vulnerabilities and insecure coding practices.
• Develop internal security tools, scripts and automation to improve offensive security capabilities.
• Research new vulnerabilities, attack techniques, tools and exploitation methods.
• Develop proof-of-concepts and exploits to validate vulnerabilities and demonstrate their potential impact.
• Collaborate with the SOC on Purple Team exercises to test and improve detection and response capabilities.
• Document findings in clear, risk-based reports with technical evidence, business impact and actionable remediation guidance.
• Present security findings to both technical and non-technical stakeholders.
• Work with infrastructure, application and IT teams to validate and remediate identified vulnerabilities.
• Evaluate and implement new offensive security tools and technologies to improve the organization's global testing capabilities.
• Continuously improve penetration testing and Red Team methodologies, tooling and capabilities.
• Support the development of the organization's internal offensive security capabilities.

Requirements:

• Bachelor's degree in computer science, cybersecurity or a relevant field, or equivalent practical experience.
• Initial professional experience in cybersecurity, penetration testing or offensive security is preferred; motivated early-career candidates with strong practical experience are encouraged to apply.
• Passionate about CTFs, vulnerability research, exploit development, or simply "breaking things" to understand how they work.
• Strong fundamentals in networking, Windows, Linux and Active Directory.
• Good understanding of common offensive security techniques and attack methodologies.
• Hands-on experience with penetration testing and offensive security tools.
• Ability to understand, reproduce and exploit security vulnerabilities.
• Experience developing security tools, automation, scripts or proof-of-concepts is highly desirable.
• Strong scripting or programming skills using Python, PowerShell, Bash or similar languages.
• Demonstrated interest in offensive security through CTFs, personal projects, GitHub projects, vulnerability research or security communities.
• Strong analytical and problem-solving skills, with a creative approach to identifying attack paths.
• Good communication and technical writing skills, with the ability to explain complex security findings clearly.
• Curiosity, autonomy and a strong willingness to continuously learn and research new attack techniques.
• Experience with web application/API security, cloud security or source-code review is a plus.
• Knowledge of OT/ICS security and industrial environments is a plus.
• Fluent English is required.
• Certifications such as OSCP, PNPT, CRTO or equivalent are a plus.