Senior Offensive Security Tester

Role & responsibilities

• Lead and execute penetration testing engagements for web applications, mobile applications, APIs, cloud environments, and enterprise networks.
• Conduct Red Team exercises and adversary simulations to evaluate organizational security posture.
• Identify, exploit, and validate vulnerabilities using manual testing techniques and offensive security tools.
• Perform threat modelling and attack-path analysis.
• Develop custom scripts, proof-of-concept exploits, and automation tools.
• Document technical findings and deliver executive-level security reports.
• Collaborate with development, infrastructure, and security teams to recommend remediation actions.
• Mentor junior penetration testers and contribute to testing methodologies.
• Stay current with emerging threats, attack techniques, and industry best practices.
• Develop Offensive Security services.

Preferred candidate profile

• Advanced Web Application Security Testing (OWASP Top 10- Broken Access Control, Cryptographic Failures, Injection, Insecure Design, Security Misconfiguration, Vulnerable/Outdated Components, Identification & Authentication Failures, Software & Data Integrity Failures, Security Logging & Monitoring Failures Server-Side Request Forgery (SSRF))
• Network Penetration Testing
• Active Directory Security Assessment
• Cloud Security Testing (AWS, Azure, GCP)
• API Security Testing
• Mobile Application Security Testing
• Red Team Operations and Threat Emulation
• Exploit Development and Vulnerability Research
• Scripting: Python, PowerShell, Bash
• MITRE ATT&CK Framework knowledge
• Operating Systems Security (Windows, Linux, macOS)
• AI Security Testing (GenAI / Agentic AI)
• OT Security Testing (Nice to have)