A
Offensive Security Engineer
Not specifiedFull-timeSecurity ResearchBeer and Brewing
Join a global cybersecurity team to simulate real-world threats, test security controls, and help protect a complex international business. The role works across enterprise, cloud, web, and AI environments and collaborates with defensive security and engineering teams.
Responsibilities
- Plan and execute red-team engagements and adversary-emulation campaigns across Windows, macOS, Linux, cloud, and web environments.
- Develop, test, and operate exploitation chains, post-exploitation tools, and persistence techniques.
- Conduct vulnerability assessments and security audits to evaluate existing controls.
- Maintain offensive tools and infrastructure, including command-and-control systems, build servers, and virtual-machine images.
- Research attack techniques, defensive controls, vendor solutions, and industry practices; provide assessments and recommendations for architectural and product decisions.
- Work with SOC, incident response, threat-hunting, and blue-team colleagues to validate detections and refine playbooks.
- Write evidence-based reports and briefings documenting findings, business impact, and prioritized remediation recommendations.
- Assess tooling needs, estimate effort and resources, document assumptions, and align proposed solutions with road maps.
- Provide training and guidance to security team members.
Requirements
- At least 3 years of hands-on experience in red-team operations, adversary emulation, or advanced enterprise penetration testing.
- Practical experience administering post-exploitation or command-and-control frameworks, or comparable custom tooling; able to develop and customize payloads and modules.
- Experience administering and troubleshooting at least two major operating-system platforms, including Windows and Linux.
- Knowledge of AI security risks, including prompt injection, data leakage, unsafe tool use, and AI supply-chain threats.
- Scripting and programming experience with one or more of Perl, Python, Ruby, Bash, C/C++, C#, or Java.
- Knowledge of security testing standards and frameworks such as OWASP or MITRE ATT&CK.
- Experience testing cloud environments such as AWS, Azure, or GCP, including identity, networking, serverless, and container attack paths.
- Practical knowledge of Active Directory, including authentication, delegation, Kerberos, common abuse paths, and mitigations.
- Strong understanding of security controls across identity, endpoint, network, cloud, and application layers.
- Able to communicate technical findings as clear remediation tasks and executive-level risk summaries.
Nice to have
- Bachelor’s degree in computer science, information systems, or a related field.
- Professional security certifications such as OSCP/E, OSEP, GPEN, or CEH.
- Familiarity with malware development, binary analysis, reverse-engineering tools, or custom post-exploitation binaries.
- Participation in the security community, such as developing or contributing to tools.