Senior Engineer – Offensive Security

Job Description

• Conduct VAPT and penetration testing across network, web, API and mobile environments
• Perform both automated and manual security testing to identify and validate vulnerabilities
• Analyse vulnerabilities, demonstrate their potential impact and provide practical remediation recommendations
• Prepare clear and professional technical VAPT reports and present findings to clients
• Develop scripts and use security tools to improve the efficiency of penetration-testing activities
• Keep up to date with emerging vulnerabilities, exploits and offensive-security techniques
• Support red-team, security assessment and other offensive-security engagements when required
• Provide technical guidance and mentoring to junior security engineers

Person Specification

• Degree in Computer Science, Cybersecurity, Information Security or a related field is preferred
• 3+ years of hands-on experience in vulnerability assessment, penetration testing (VAPT)
• OSCP or equivalent offensive-security certification is an advantage
• Experience in cloud security, red teaming or source-code review will be an added advantage
• Strong experience in Network, Web Application, API and/or Mobile Application Security Testing
• Strong understanding of OWASP Top 10 and common security vulnerabilities
• Hands-on experience with tools such as Burp Suite, Nmap, Metasploit, Nessus/OpenVAS and Kali Linux
• Good scripting skills in Python, Bash, PowerShell or similar
• Strong analytical, problem-solving and technical reporting skills
• Good communication skills with the ability to interact confidently with clients
• Ability to independently manage VAPT engagements from testing through reporting and client presentation