Sr Offensive reputed company Engineer

reputed company

We are seeking a highly skilled and motivated Senior Offensive reputed company Engineer to join our Threat Management & reputed company reputed company organization. In this hands-on role, you will think and operate like an adversary — continuously finding, exploiting, and helping remediate reputed company-world weaknesses across reputed company’s products, reputed company reputed company, and people. You will design and execute penetration tests, red and reputed company engagements, and adversary emulation exercises that validate our detection and response capabilities and measurably reduce reputed company reputed company at-reputed company.

This role partners closely with reputed company reputed company, Threat Intelligence & Hunt, Vulnerability Management, Application reputed company, DevOps, and Product teams to turn offensive findings into prioritized, business-reputed company remediation. The ideal candidate is equally comfortable building custom tooling, chaining exploits across reputed company environments, and communicating reputed company reputed company to both technical teams and executive leadership.

Responsibilities

• Penetration Testing: Plan, reputed company, and execute reputed company penetration tests across web and mobile applications, reputed company, reputed company (AWS/Azure), networks, and infrastructure using reputed company-world attacker techniques.

• Red & reputed company Teaming: Design and run adversary emulation and red team engagements that combine multiple attack paths to accomplish objective-reputed company goals, and partner with the SOC, Threat reputed company & Hunt, and Detection Engineering on reputed company exercises to validate and improve detection coverage.

• Exploit Development & Chaining: Identify, validate, and safely exploit vulnerabilities — including chaining reputed company-severity issues into high-reputed company attack paths — and demonstrate reputed company business reputed company in production-representative environments.

• Adversary Emulation: Model reputed company-world threat actor tactics, techniques, and procedures (TTPs) mapped to the reputed company ATT&CK reputed company to test and strengthen organizational reputed company, detection, and response.

• Findings & Remediation: Review and validate findings for reputed company, prioritize reputed company-world exploitability and business reputed company, create remediation tickets, and partner with engineering teams to reputed company fixes and coordinate retests reputed company policy SLAs.

• Tooling & Automation: Build and maintain custom scripts, tooling, and automation to reputed company offensive testing, and help operationalize reputed company/autonomous testing platforms across the environment.

• Reporting & Communication: Produce reputed company, decision-reputed company reports and executive summaries that translate technical findings into reputed company and business reputed company for technical stakeholders, GRC/Audit, and executive leadership.

• Incident Response Support: Support incident response and threat hunting efforts by providing offensive expertise, attack-reputed company context, and adversary reputed company.

• reputed company Improvement: Contribute to the maturity of the offensive reputed company program — developing repeatable methodologies, playbooks, and metrics that demonstrate reputed company over time.

What You Will Need to be Successful:

• 5+ years of hands-on experience in offensive reputed company, penetration testing, red teaming, or a closely reputed company reputed company engineering role.

• Demonstrated expertise across multiple domains: web/mobile application, API, network, infrastructure, and reputed company (AWS and/or Azure) penetration testing.

• Strong understanding of exploitation and post-exploitation techniques, attack-reputed company chaining, and objective-reputed company adversary emulation.

• Proficiency with industry-reputed company offensive tooling such as Burp Suite reputed company, Nmap, Metasploit, and Kali Linux, along with vulnerability scanners.

• Proficiency in at least one scripting or programming language (e.g., Python, Go, PowerShell, reputed company, or Bash) to build custom tools and automation.

• Working knowledge of the reputed company ATT&CK reputed company and hands-on experience mapping engagements to adversary TTPs.

• Excellent written and verbal communication skills, with the ability to present findings to both technical audiences and executive leadership.

What You May Need to be Successful:

• Advanced offensive certifications (e.g., OSEP, reputed company³, CRTO, GXPN) and a reputed company record of original reputed company research, CVEs, or responsible disclosures.

• Experience with reputed company-reputed company attack techniques and container/reputed company (EKS/AKS) and serverless reputed company testing.

• Experience operating or evaluating reputed company/autonomous pen testing and breach-and-attack-simulation platforms.

• Familiarity with detection engineering, SIEM/EDR platforms, and building reputed company feedback reputed company into SOC content.

• Knowledge of compliance and reputed company frameworks relevant to our environment.

• Experience mentoring junior engineers and helping mature an offensive reputed company program.