Senior Offensive Security Expert

📋 Description

• Deeply understand complex and intricate platforms to find design- and implementation vulnerabilities.
• Scope, prepare, and perform full-stack penetration tests to find vulnerabilities in our products or infrastructure components.
• Collaborate with and support our developers in designing structural fixes to identified vulnerabilities and clearly communicate the possible impact to our product teams, engineers, and CTO to build the most secure platform together.
• Work with our blue team to try to evade our security controls, monitoring and alerting to sharpen our defensive capabilities in the form of purple teaming exercises.
• Share your knowledge with the rest of the team and organization, and help mature our Offensive Security Program.
• Research and develop new attack techniques and tooling that can be used to streamline our security assessment process and results.

🎯 Requirements

• At least 5 years of offensive security experience with defining and executing testing scopes on different technology stacks.
• Experienced in organizing or participating in red-teaming engagements - in line with DORA/TIBER.
• Able to effectively communicate, network, and manage expectations and test outcomes to (non-technical) stakeholders and product teams.
• You enjoy supporting and collaborating with developers in not only reporting but also in finding structural solutions for vulnerabilities that you find, always striving for good, secure outcomes.
• Ability to efficiently use and navigate open-source tooling and Linux/MacOS environments.
• Good understanding of mitigation options in an enterprise environment.