- Company Name
- Infinity Quest
- Job Title
- Senior Offensive Security Specialist
- Job Description
-
**Job Title**
Senior Offensive Security Specialist
**Role Summary**
Lead and execute advanced penetration testing, red‑team exercises, and adversary emulation across on‑premises, web, and cloud environments. Identify and remediate high‑risk vulnerabilities, collaborate with SOC and incident response teams, and provide actionable insights to protect enterprise assets.
**Expactations**
- Minimum 12 years of relevant experience with at least 6 years focused on cybersecurity testing.
- Demonstrated success in delivering penetration tests for large, complex infrastructures.
- Strong communication skills, fluently speaking and writing in English (C1 level).
- Proactive, independently driven, and capable of mentoring junior staff.
**Key Responsibilities**
1. Plan, execute, and document comprehensive penetration tests and red‑team engagements for on‑prem, web, and cloud platforms.
2. Conduct advanced exploitation techniques: AD/Enterprise attacks, payload generation, shellcode, binary exploitation, reverse engineering, fuzzing, and automated vulnerability discovery.
3. Perform detailed network reconnaissance, sub‑network mapping, and C2 framework deployment.
4. Collaborate with SOC analysts to support incident response, providing evidence and technical context.
5. Provide technical guidance and mentorship to security teams on secure architecture and defensive countermeasures.
6. Develop and maintain reusable scripts, tools, and playbooks in PowerShell, Python, or Bash.
7. Translate findings into business‑friendly remediation recommendations and risk assessments.
8. Continually update knowledge of emerging threats, attack vectors, and emerging defensive technologies.
**Required Skills**
- Deep understanding of network protocols, cryptography, and common attack methodologies.
- Proficiency with penetration testing suites (Metasploit, Burp Suite, Cobalt Strike, etc.) and red‑team toolsets.
- Advanced knowledge of Windows, Linux, and cloud (AWS, Azure, GCP) environments.
- Strong scripting/programming ability in PowerShell, Python, Bash, or comparable languages.
- Experience coordinating with SOC, incident response, and threat‑intel teams.
- Excellent written and verbal communication in English (C1 proficiency).
**Required Education & Certifications**
- Bachelor’s degree in IT, Computer Science, Cybersecurity, or related field.
- Minimum of two relevant certifications: at least one in offensive security (OSCP, CRTO, GPEN, GXPN, CCSP) and one in cybersecurity governance or IT.