Offensive Security Lead

Quick Facts

• Role: Offensive Security Lead Expert

Description

Lead and execute attack and penetration testing engagements across web/mobile applications, infrastructure, and cloud. Perform Red Team assessments, application code reviews, social engineering campaigns, threat modeling, and security architecture reviews. Deliver deep-dive technical testing and convert findings into prioritized, business-relevant risk and remediation guidance.

Responsibilities

• Lead and deliver attack & penetration testing engagements (web/mobile, infrastructure, cloud)

• Conduct Red Team assessments, application code reviews, social engineering, threat modeling, and security architecture reviews

• Perform hands-on testing and vulnerability analysis; handle evidence securely and produce high-quality reports

• Communicate complex findings into business-relevant risks with clear remediation priorities

• Guide and mentor a small team of security consultants; review work and drive quality standards

Requirements

• 4+ years of hands-on experience in Dev/IT Security conducting penetration testing and security assessments

• Deep understanding of OWASP Top 10, ASVS, and common attack paths across web, mobile, infrastructure, and cloud

• Strong familiarity with Red Team methodologies and frameworks (e.g., MITRE ATT&CK, OSINT, Social Engineering)

• In-depth knowledge of IT system architecture, network protocols, operating systems, and full-stack web applications

• Ability to provide concrete technical solutions and recommendations to mitigate vulnerabilities

• Offensive security certifications such as OSCP, OSWE, GPEN, or equivalent

• Strong structured documentation and presentation skills for non-technical stakeholders

• Excellent command of English (spoken and written)