Senior Executive - Offensive Security

Responsibilities

• Conduct penetration testing across web applications, APIs, internal networks, cloud environments, and endpoints.
• Conduct Red team exercises by simulating attacker techniques aligned to MITRE ATT&CK.
• Perform vulnerability exploitation and validation to assess real business impact.
• Assist in attack surface discovery and exposure analysis.
• Collaborate with Blue Team, SOC, and IT teams to support root-cause analysis and remediation validation.
• Document findings clearly with risk-based impact, exploitation evidence, and actionable remediation guidance.
• Support retesting and closure validation of previously identified findings.
• Stay current with emerging attack techniques, tools, and threat trends.
• Adhere to ethical hacking standards and organizational security policies.

Technical Skills & Competencies

• Hands-on experience with penetration testing tools such as Burp Suite, Metasploit, Nmap, Nessus, Bloodhound, etc.
• Strong understanding of Web/API/Mobile application security (OWASP Top 10, SANS 25)
• Network security concepts. Authentication, authorization, and access control weaknesses.
• Basic experience in scripting (Python, Bash, or PowerShell preferred).
• Familiarity with Active Directory attacks, privilege escalation, and lateral movement.
• Understanding of cloud security fundamentals (AWS / Azure exposure is a plus).
• Working knowledge of MITRE ATT&CK and kill-chain concepts.

Experience

• Work Experience: 2-4 years.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.