Offensive Security Lead

Job Description

CyberShelter is seeking a passionate and experienced Offensive Security Lead to spearhead our offensive security initiatives, including VAPT, red teaming, source code reviews, and advanced security assessments across a diverse range of platforms. This role requires strong technical leadership, hands-on expertise, client engagement, and the ability to guide and mentor a specialized team. Key Responsibilities Lead and manage the offensive security team responsible for: Vulnerability Assessment & Penetration Testing (Web, Mobile, APIs, Network, Infrastructure, Thick Clients) Red Teaming and adversary simulation Source code review, threat modeling, and secure architecture assessments Configuration reviews, segmentation testing, and wireless security assessments Own end-to-end project lifecycle including planning, execution, reporting, and customer walkthroughs. Review and validate findings, risk ratings, and ensure quality assurance across all deliverables. Collaborate with clients to understand business context, prioritize findings based on impact, and advise on remediation strategies. Drive threat-based assessment approaches aligned with MITRE ATT&CK, OWASP, and other frameworks. Stay current with evolving threat landscapes, tools, and industry best practices. Qualifications Experience: 810 years of hands-on experience in offensive security, red teaming, and advanced security assessments. Technical Skills: Expertise in manual and automated VAPT techniques across full tech stack Deep understanding of OWASP Top 10, SANS Top 25, NIST SP 800-115, etc. Exposure to DevSecOps, CI/CD security, and modern application stacks Certifications: OSCP, OSCE, OSEP, CRTP, CREST or equivalent (preferred) Soft Skills: Strong communication, leadership, client-facing experience, and documentation skills. Preferred Attributes Passionate about offensive security and continuous learning Ability to manage multiple concurrent projects and mentor junior team members Strategic mindset with strong operational execution capabilities