{"id":3473177,"url":"https://alion.io/job/applaudo-senior-offensive-security-engineer-azure-entra-id","title":"Senior Offensive Security Engineer (Azure & Entra ID)","company":{"id":5319,"name":"Applaudo","domain":"applaudostudios.com","url":"https://alion.io/company/applaudo-studios","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mexico City, Mexico"],"countries":["MX"],"hiring_countries":["MX"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":42000,"max_usd":97000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"BloodHound","optional":false},{"name":"CVSS","optional":false},{"name":"Lighthouse","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Windows","optional":false},{"name":"Azure AKS","optional":true},{"name":"Kubernetes","optional":true},{"name":"Microsoft Defender for Cloud","optional":true},{"name":"OWASP","optional":true}],"status":"live","first_seen_at":"2026-10-29T16:36:01Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-03T02:53:41Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About You\nYou are an offensive security professional with hands-on expertise in Microsoft Entra ID, Azure privilege escalation, and identity-driven attack paths. You can start from an approved foothold, assess security boundaries, and demonstrate whether controls prevent access to privileged identities and sensitive resources.\nYou approach production testing carefully, keeping actions controlled, reversible, and precisely documented. You can explain complex attack paths to cloud administrators and security stakeholders and distinguish demonstrated exploitation from posture-only observations.\nNote: This role operates under a contractor model for an initial period of 2 months, with the possibility of extension.\nYou Bring to Applaudo the Following Competencies:\nBachelor’s Degree in Computer Science, Cybersecurity, Software Engineering, or a related field is desired, or equivalent professional experience.\nEnd to end penetration testing methodology covering reconnaissance, exploitation, privilege escalation, lateral movement and reporting.\nOffensive testing of Microsoft Entra ID, including directory roles, PIM, app registrations, consent grants and Conditional Access behavior.\nAzure RBAC privilege escalation and abuse of managed identities and service principals.\nToken theft and abuse, covering access and refresh tokens, the IMDS managed identity endpoint, and the Graph and ARM APIs.\nHands on experience with Azure offensive tooling such as ROADtools, AzureHound/BloodHound, AADInternals, MicroBurst or GraphRunner.\nAttack path analysis across subscriptions and tenants, including B2B guests, multitenant apps and Azure Lighthouse.\nActive Directory and Windows privilege escalation and lateral movement.\nWorking knowledge of the Microsoft Cloud Penetration Testing Rules of Engagement.\nCVSS v3.1 scoring and regulator ready reporting supported by reproducible evidence.\nAbility to operate in a controlled and reversible way in production cloud environments.\nPrecise, timestamped record keeping of every action to support detection and response review.\nStrong spoken and written English (B2+) to explain attack paths live to client cloud administrators and managed service providers.\nNice to haves:\nKubernetes and AKS offensive testing, including container escape, kubelet abuse and workload identity.\nHybrid identity attack paths across Entra Connect, ADFS and on premises Active Directory to cloud.\nWeb application and API penetration testing following OWASP WSTG and the OWASP API Security Top 10.\nAbility to read Defender for Cloud or CSPM output to plan attack paths.\nCertifications such as CARTP, CARTE, GIAC Cloud Penetration Tester (GCPN), OSCP, OSEP, CRTP or CRTE.\nYou Will Be Accountable for the Following Responsibilities:\nLead identity and Azure boundary assumed breach testing across two Azure tenants.\nStart from approved footholds, including a standard user with MFA, a workload identity credential or a shell on Azure compute, and attempt privilege escalation through Entra ID roles, Azure RBAC, managed identities and service principals.\nAttempt movement between approved subscriptions and between tenants, and assess whether separation controls hold.\nAttempt to reach secrets, keys, tokens and stores of nonpublic information in Key Vault, Storage and databases.\nAssess AKS workloads where authorized, including workload identity abuse and pod to node escalation.\nChain cloud findings with application layer findings, for example moving from a compromised application to its workload identity, to demonstrate end to end attack paths.\nProve privileged access only through harmless read actions or approved reversible markers, without changing tenant wide settings.\nReport each objective as achieved, with the attack path and supporting evidence, or blocked, with what stopped the attempt, and report posture only observations separately as untested.\nRemove all created artifacts, including app registrations, role assignments and credentials, before testing ends.\nRetest remediated attack paths and contribute to the revalidation report.\nEscalate stop conditions within one hour and execute all testing without service disruption or data loss.\n Proven end to end offensive security experience across reconnaissance, exploitation, privilege escalation, lateral movement and reporting.\nOffensive testing of Microsoft Entra ID and Azure RBAC, including managed identities and service principals.\nAzure offensive tooling such as ROADtools, AzureHound/BloodHound, AADInternals, MicroBurst or GraphRunner.\nCross subscription and cross tenant attack path analysis, plus Active Directory privilege escalation and lateral movement.\n About Us\nWe Are Engineered Different.\nAt Applaudo, talented people design, build, and scale meaningful, AI-powered solutions that create real business impact. As an AI-native organization, we collaborate across design, development, cloud, data, and artificial intelligence to turn ideas into scalable products that transform how companies operate, make decisions, and grow.\nWe are building a high-performance culture grounded in five values: Empowering Excellence, Collaborative Teamwork, Unsolicited Respect, Consistent Transparency, and Efficient Communication. These define how we work, how we support one another, and how we hold ourselves accountable.\nApplaudo is a place for people who want to learn fast, take ownership, and work alongside strong teams they are proud to belong to. Joining us means being part of an organization that is evolving intentionally, investing in modern ways of working, and leading AI-native transformation at scale.","description_format":"text","description_chars":5609,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Mexico","iso":"MX","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","UI/UX Design","IT Outsourcing & Dedicated Teams","Web Development Services"],"lifecycle":[{"event":"open","at":"2026-10-29T17:57:54Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":33,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/applaudo-senior-offensive-security-engineer-azure-entra-id","json_url":"https://alion.io/job/applaudo-senior-offensive-security-engineer-azure-entra-id.json","meta":{"generated_at":"2026-11-03T04:13:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5790,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5319},"rest":"https://alion.io/mcp/rest/get_company?id=5319"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fapplaudo-senior-offensive-security-engineer-azure-entra-id"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fapplaudo-senior-offensive-security-engineer-azure-entra-id"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fapplaudo-senior-offensive-security-engineer-azure-entra-id"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/applaudo-senior-offensive-security-engineer-azure-entra-id\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fapplaudo-senior-offensive-security-engineer-azure-entra-id"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3473177}},{"tool":"search_jobs","arguments":{"company":"applaudostudios.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3473177},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}