Offensive Security Analyst

Responsibilities

• Conduct security assessments on Web, Mobile and APIs REST/SOAP/GraphQL.
• Perform penetration tests on both public and private network infrastructure assets.
• Conduct adversary emulations and red teaming exercises, both internally and externally.
• Perform source code review for applications developed in different languages.
• Develop testing scripts and procedures to fulfil comprehensive assessment requirements.
• Produce executive and technical reports and provide recommendations based on findings.
• Conduct external and internal segmentation testing on client infrastructure.
• Develop penetration testing strategies and test cases for complex enterprise applications.
• Develop methodology documents and pre-engagement questionnaires for Penetration Testing and Vulnerability Assessment projects.
• Thoroughly document exploits chain/proof of concept scenarios for client use.
• Perform Red Team activities in coordination with the Security Operations Centre and incident response teams to validate Blue Team monitoring & detection processes.

Essential Skills

• A minimum of 2 years of professional experience in Pentesting
• Development or scripting experience and skills.
• Strong knowledge of Web, Mobile and API Security assessments and source code review of applications.
• Excellent communication skills and ability to clearly articulate complex security issues.
• Strong interpersonal and presentation skills.
• Ability to work with minimal levels of supervision or oversight.

Additional Desired Skills

• Knowledge of Cloud Security Assessments (AWS/Azure/GCP).
• Knowledge of Active Directory and Exploitation.
• Knowledge of phishing and social engineering simulations and tools.
• Familiarity with Malware Development & Defense Evasion Techniques.
• Experience in Bug Bounty programs.

Education Requirements

• Bachelors in computer science/IT/Electronics Engineering, M.C.A. or equivalent University degree.
• At least one of the following certifications or similar is preferred: OSCP, PNPT or CRTP