Offensive Security Lead Expert

Key Responsibilities

• Technical Leadership & Delivery: Lead and execute Attack & Penetration Testing engagements, including web/mobile app security, infrastructure testing, and cloud security assessments.

• Advanced Offensive Security: Conduct Red Team assessments, application code reviews, social engineering campaigns, threat modeling, and security architecture reviews.

• Hands-on Testing & Analysis: Perform deep-dive technical testing, analyze vulnerabilities, handle evidence securely, and craft high-quality, actionable reports.

• Risk Communication: Translate complex technical findings into business-relevant risks with clear, prioritized remediation guidance.

• Team Guidance & Mentorship: Guide, mentor, and review the work of a small team of security consultants, driving their technical growth and quality standards.

Requirements

• Experience: 4+ years of hands-on experience in Dev / IT Security conducting penetration testing projects and security assessments.

• Offensive Security Expertise:

  • Deep understanding of OWASP Top 10, ASVS (Application Security Verification Standards), and common attack paths across web, mobile, infrastructure, and cloud.

  • Strong familiarity with Red Team methodologies and frameworks (e.g., MITRE ATT&CK, OSINT, Social Engineering).

• Technical Fundamentals:

  • In-depth knowledge of IT system architecture, network protocols, operating systems, and full-stack web applications (frontend to backend).

  • Ability to provide concrete technical solutions and recommendations to mitigate vulnerabilities.

• Certifications: Industry-recognized offensive certifications such as OSCP, OSWE, GPEN, or equivalent.

• Consulting & Soft Skills: Strong communication, structured documentation, and presentation skills to convey technical topics to non-technical stakeholders.

• Languages: Excellent command of English (spoken and written).