Offensive Security Engineer

Location: Remote in the US

About us

TalentHunt Inc. is a North American premier talent management and recruitment solutions provider for established and growth stage companies. We help candidates figure out the next challenge that fits their professional and personal growth plans and match them with exciting and very rewarding opportunities with leading companies across the globe.

Our client

Our client is a global technology leader that helps enterprise companies, Federal and SLED government agencies discover, manage, secure and service all of their IT assets. They are a billion dollar revenue generating behemoth and are marching on to crush revenue targets for this year. With offices in around 30 countries, they provide a strong support structure to all their clients.

What will you do?

As an Offensive Security Engineer, you will be responsible for evaluating the security of applications, networks, and systems by simulating cyberattacks. You will conduct comprehensive security assessments, identify vulnerabilities, and provide recommendations for remediation to enhance the overall security posture of our client’s products.

• Conduct regular penetration tests and vulnerability assessments of applications, network and systems using various tools and techniques to exploit identified vulnerabilities and assess the effectiveness of existing security measures.
• Plan and execute red team exercises to simulate advanced persistent threat (APT) scenarios and assess the organization’s detection and response capabilities.
• Assist in the investigation and resolution of security incidents. Provide technical expertise during incident response activities.
• Collaborate with internal security teams to assess the severity and impact of reported vulnerabilities and prioritize them for resolution based on risk.
• Track the progress of vulnerability remediation efforts and ensure that issues are addressed within agreed-upon timelines.
• Maintain detailed records of vulnerability reports, assessments, and resolutions to support compliance requirements and internal reporting.
• Develop and maintain custom security tools and scripts to enhance assessment capabilities.
• Monitor industry best practices and emerging trends in responsible disclosure and vulnerability management to identify opportunities for program enhancement and optimization.
• Stay abreast of the latest security threats, trends, and technologies through continuous learning and research to enhance penetration testing methodologies and techniques.

Who are you?

• 5+ years of experience in cybersecurity, with a focus on penetration testing and vulnerability assessment.
• Proficiency in using penetration testing tools such as Metasploit, Nmap, Burp Suite, etc.
• Strong understanding of networking protocols, operating systems, and web applications.
• Familiarity with cloud security, container security, and mobile security.
• Experience with exploit development and reverse engineering.
• Proficiency in programming and scripting languages (e.g., Python, Bash, PowerShell).
• OSCP, OSCE, GPEN, CRTP or other relevant certifications.
• Knowledge of common cybersecurity threats and attack vectors.
• Active participation in Responsible Disclosure Programs (VDP) and Bugbounty programs
• Excellent analytical and problem-solving skills.
• Effective communication skills for writing detailed reports and presenting findings to stakeholders.

If you’re interested, please send your resume to Allan Gomes at allan@talenthunt.ca