Service Operations Specialist

We are seeking a highly skilled Offensive Security professional with expertise in Red Team Operations, Application Security Testing, API Security Assessment, Mobile Application Penetration Testing, and Dynamic Application Security Testing (DAST). The role involves simulating real-world cyberattacks, identifying security weaknesses across applications and infrastructure, and providing actionable remediation guidance to development and security teams.

• Configure and execute DAST scans across web applications and APIs.
• Validate and triage findings.

Must-Have Skills:

1. Offensive Security / Penetration Testing
   • 5+ years of hands-on experience in Penetration Testing, Red Teaming, or Offensive Security.
   • Strong understanding of adversary simulation and attack methodologies.
2. Web & API Security
   • Strong expertise in Web Application Security and API Security.
   • OWASP Top 10 and OWASP API Top 10.
   • Hands-on experience with Burp Suite, OWASP ZAP and similar tools.
3. Network & Active Directory Security
   • Network penetration testing and vulnerability assessment.
   • Hands-on experience with Nmap, Metasploit, BloodHound, Cobalt Strike/equivalent.
   • Knowledge of Active Directory attack techniques.
4. Cloud & Infrastructure Security
   • Hands-on security testing across Azure, AWS and/or GCP.
   • Understanding of cloud attack paths, IAM, misconfigurations and cloud-native security.
5. Red Team Tools, Scripting & Security Frameworks
   • Strong hands-on experience with Kali Linux and offensive security tooling.
   • Ability to develop attack/automation scripts using Python, PowerShell or Bash.

   • Working knowledge of MITRE ATT&CK, Secure SDLC and NIST CSF.

Good-to-have skills:

• Mobile & Advanced Application Security
  • Mobile penetration testing using MobSF, Frida.
  • Secure code review and advanced application security testing.
• Cloud Red Teaming & Container Security
  • Cloud Red Teaming across Azure/AWS/GCP.
  • Kubernetes, Docker and container security experience.
• DevSecOps & CI/CD Security
  • Integration of security testing into CI/CD pipelines.
  • DAST, threat modeling and DevSecOps practices.
• Purple Teaming & Adversary Emulation
  • Experience conducting Purple Team exercises.
  • Advanced adversary emulation and MITRE ATT&CK-based assessments.
• Industry Certifications
  • Preferred: OSCP, OSEP, OSWE, CRTO, CRTP, PNPT, CISSP, GWAPT, GPEN, GMOB, GXPN or AZ-500.