Conduct penetration tests, red team and purple team exercises across web applications, networks, APIs, cloud, and mobile systems. Identify and exploit vulnerabilities, develop proof-of-concept exploits and security automation, integrate offensive techniques into CI/CD pipelines, research emerging threats, validate detection capabilities, and document remediation guidance. Collaborate with SOC, DevOps, IT, engineering, and incident response teams to strengthen organizational security defenses.
Role Overview:
As an Offensive Security Engineer, you will be responsible for simulating real-world
cyberattacks to identify vulnerabilities, assess risks, and improve security defenses. You will
work closely with security analysts, DevOps, and IT teams to enhance the organization's
resilience against cyber threats.
Key Responsibilities:
Penetration Testing & Red Teaming
● Conduct advanced penetration testing on web apps, networks, APIs, cloud, and mobile
applications.
● Simulate real-world attack scenarios to evaluate security defenses.
● Perform internal/external network and infrastructure security assessments.
● Execute red team exercises, including phishing simulations and social engineering
campaigns.
● Collaborate with SOC/Security teams to validate monitoring and defense effectiveness.
Vulnerability Research & Exploitation
● Identify, analyze, and exploit vulnerabilities across various systems.
● Develop custom scripts or exploits for proof-of-concept attacks.
● Work with security teams to ensure timely patching and risk mitigation.
Security Tool Development & Automation
● Develop and maintain security testing tools and automation scripts.
● Integrate offensive security techniques into CI/CD pipelines.
● Evaluate vendor security tools and features through controlled attack simulations.
● Build proof-of-concept scenarios to confirm vendor-promoted capabilities function as
intended.
Threat Hunting & Adversary Simulation
● Conduct red team and purple team exercises to test detection & response capabilities.
● Stay ahead of cyber threats by researching latest hacking trends, zero-days, and TTPs.
● Provide actionable intelligence to incident response teams.
Security Reporting & Collaboration
● Document security findings with detailed remediation steps.
● Work with engineering teams to implement security best practices.
● Contribute to security awareness training within the company.
Requirements
Required Skills & Qualifications:
● Experience: 3+ years in offensive security, penetration testing, or red teaming.
Technical Expertise:
● Strong knowledge of penetration testing tools (Burp Suite, Metasploit, Nmap, Kali Linux,
etc.).
● Deep understanding of network security, web security, and cloud security.
● Proficiency in exploit development, reverse engineering, and malware analysis.
● Experience with scripting languages (Python, Bash, PowerShell).
● Hands-on experience with Active Directory attacks, privilege escalation, and lateral
movement.
Mandatory Certifications(Baseline Requirements):
● CEH (Certified Ethical Hacker - EC - Council V13)
Preferred Certifications(Role Enhancing Credentials):
● OSCP (Offensive Security Certified Professional)
● OSWE / OSEP / OSEE (Advanced Offensive Security Certifications)
● CRTO (Certified Red Team Operator)
● GPEN (GIAC Penetration Tester)
Similar Jobs
Artificial Intelligence • Big Data • Cloud • Information Technology • Software • Cybersecurity • Data Privacy
Manages global partner program operations, including case resolution, workflow optimization, partner onboarding, content governance, certification reporting, AI-driven analytics, and financial processes. The role coordinates across Legal, Sales, Finance, and Product, uses Salesforce and Coupa, and delivers data-backed recommendations to leadership. It requires strong problem-solving, communication, adaptability, and experience supporting global channel or partner operations.
Top Skills:
ClaudeCoupaEnterprise Search PlatformsGeminiGenerative AiGleanGoogle WorkspaceSalesforce
Cloud • Information Technology • Productivity • Security • Software • App development • Automation
Own the technical evolution and architecture of Jira Data Management, leading enterprise-scale data movement, governance, resilience, and data health initiatives. Define long-term platform roadmaps, lead major architectural programs, and improve reliability, performance, observability, security, and operational excellence. Provide hands-on technical leadership through design reviews, investigations, incident reviews, and complex problem solving while mentoring senior and principal engineers.
Top Skills:
AWSGCPGoJavaJavaScriptJIRAPython
.png){kind=logo}
Artificial Intelligence • Edtech • Mobile • Natural Language Processing • Productivity • Software
Leads global paid media strategy, budgeting, campaign execution, audience targeting, attribution, incrementality testing, and marketing mix modeling. Manages agency and platform relationships, affiliate programs, performance reporting, experimentation, and emerging ad formats. Builds and mentors a remote team while partnering with Data, Engineering, Product, Finance, and Legal to optimize CAC, ROAS, LTV, and profitability.
Top Skills:
A/B TestingApple Search AdsAttributionDv360Ga4Google AdsIncrementality TestingLookerMarketing Mix ModelingMeta AdsPmaxTiktok Ads ManagerUac
What you need to know about the Bengaluru Tech Scene
Dubbed the "Silicon Valley of India," Bengaluru has emerged as the nation's leading hub for information technology and a go-to destination for startups. Home to tech giants like ISRO, Infosys, Wipro and HAL, the city attracts and cultivates a rich pool of tech talent, supported by numerous educational and research institutions including the Indian Institute of Science, Bangalore Institute of Technology, and the International Institute of Information Technology.
