Offensive Security Specialist

About the role

We are looking for a mid‑level penetration tester who wants full ownership of engagements—from scoping to presenting findings and confirming fixes. This hands‑on consulting role involves testing web applications, APIs, infrastructure, cloud and identity platforms, and supporting security configuration reviews across AWS, Microsoft Azure and Microsoft 365.

Key responsibilities

• Plan and execute penetration tests of web applications, APIs, infrastructure, cloud and identity platforms within agreed scopes.
• Design realistic attack scenarios, chain weaknesses, and validate findings before reporting.
• Test authentication, authorisation, session management and application logic manually.
• Validate defensive controls such as WAFs, rate limiting, MFA and bot protection.
• Support security configuration reviews for AWS, Azure and Microsoft 365 (identity, privileged access, logging, exposed services).
• Write evidence‑based reports, present findings to engineers, CIOs and CISOs, and retest to confirm remediation.
• Help scope engagements, contribute to methodology, tooling and report quality, and mentor placement students.

Required profile

• Strong penetration testing capability across web, API, infrastructure and cloud environments.
• Ability to think like an attacker, prioritize credible attack paths and separate real risk from scanner noise.
• Excellent written and verbal communication, able to explain technical findings to both engineers and executives.
• Commercial experience delivering penetration testing engagements for clients or internal stakeholders.
• Relevant certifications (OSCP highly desirable; OSWA, OSWE, OSEP, CRTO, CREST CRT or equivalents are a plus).

Required skills

• Web application and API pentesting, including microservices and cloud‑hosted systems.
• Infrastructure and network pentesting.
• Authentication, authorisation and identity testing (Active Directory, Microsoft Entra ID).
• Cloud security reviews for AWS, Microsoft Azure and Microsoft 365.
• Scripting/automation in Python, PowerShell or Bash.
• Familiarity with tools such as Burp Suite, Nmap, Metasploit, BloodHound.
• Attack‑path analysis, adversary simulation or red‑team style testing.