Senior Offensive Security Engineer

Overview

As a Senior Offensive Security Engineer, you will evaluate and strengthen the security posture of the organization's IT infrastructure, applications, and networks by identifying and addressing vulnerabilities through detailed assessments and hands-on penetration testing.

What you'll do

• Perform detailed vulnerability assessments on internal and external systems, networks, and applications using automated tools and manual techniques.
• Execute penetration tests on IT infrastructure, web applications, mobile platforms, and network components.
• Simulate cyber-attacks to evaluate the effectiveness of existing security measures.
• Design, implement, and maintain secure configuration baselines across cloud and on-premise environments.
• Perform configuration reviews of security tools and platforms to identify misconfigurations and drive them to closure.
• Support incident response efforts by assisting with root cause analysis (RCA) or incident containment.
• Analyze assessment and testing results to identify potential vulnerabilities and risks.
• Prepare comprehensive reports with actionable recommendations for remediation.
• Communicate findings effectively to both technical and non-technical stakeholders.
• Work closely with security, development, and operations teams to prioritize and remediate identified vulnerabilities.
• Assist in implementing security controls and solutions.
• Develop and maintain documentation related to assessment methodologies, findings, and remediation recommendations.
• Stay updated with emerging cybersecurity threats, vulnerabilities, and industry best practices, and incorporate new knowledge into testing activities.

What you'll need

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Strong understanding of network protocols, operating systems, and web technologies.
• Proficiency with security testing tools such as Nessus, Nmap, Burp Suite, Metasploit, and similar platforms.
• In-depth knowledge of IT security standards and frameworks such as OWASP, NIST, and SANS Top 25.
• Familiarity with the OSI model, TCP/IP model, and core networking concepts.
• Hands-on experience in manual penetration testing and security assessments.
• 3+ years of relevant experience in VAPT or cybersecurity-related roles.
• Familiarity with AI-powered security tools and AI/ML security considerations for detection, analysis, and hardening.
• Broad knowledge of security technologies related to applications, databases, networks, servers, Active Directory, and desktops.

Nice to have

• Certifications such as CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), or equivalent.
• Experience with penetration testing simulations such as Hack The Box or Capture The Flag (CTF) exercises.
• Proficiency in scripting languages (e.g., Python, Bash, or PowerShell) to automate security testing and reporting tasks.
• Experience in Vendor Risk Assessments or IT Governance processes.
• Demonstrated intellectual curiosity and a proven track record of continuous learning in the security landscape.
• Hands-on experience with commercial and open-source tools/frameworks including Burp Suite, Metasploit, Core Impact, Scapy, AppScan, WebInspect, Qualys, Nessus, Nmap, SQLmap, and OWASP ZAP.

Details

• Location: Atari Europe (Remote).
• Travel may be required across the country for project execution, monitoring, assessments, testing activities, and coordination with geographically distributed teams, as and when required.