Offensive Security Specialist

Purpose

You will be at the forefront of helping our customers identify, understand, and address security weaknesses across their environments through advanced penetration testing and offensive security services. Your mission is to deliver high-quality security testing and advisory engagements that not only identify vulnerabilities but also demonstrate real-world impact and provide clear, actionable guidance to strengthen resilience.

You will work closely with senior members of the Offensive Security Services and technical teams to deliver security assurance services across multiple disciplines, including network and web application penetration testing, as well as more advanced activities such as social engineering, red teaming, and complex advisory engagements.

As an experienced offensive security specialist, you will combine strong hands-on technical expertise with a structured and analytical approach. You will translate technical findings into meaningful business risk, ensuring clients clearly understand both the implications and the path to remediation.

Responsibilities

You will:

• Execute a wide range of penetration testing engagements, including network, infrastructure, and web application testing across diverse client environments.
• Progressively take part in more advanced offensive security activities, including:
  • Red teaming
  • Adversary simulations
  • Social engineering engagements
  • Source code or configuration reviews
• Simulate attacker behaviour by identifying, chaining, and exploiting vulnerabilities to demonstrate realistic attack paths and impact.
• Support the CRS team in delivering broader cybersecurity services, including:
  • Design
  • Implementation
  • Compliance-related activities
• Conduct in-depth research across a wide variety of cybersecurity domains, including:
  • New vulnerabilities
  • Exploitation techniques
  • Defensive bypass methods
• Develop, customise, and maintain attack and analysis tools to expand and strengthen internal offensive capabilities.
• Assist in the design, deployment, and maintenance of Foregenix attack infrastructure, including:
  • Attack nodes
  • Supporting environments
• Collect, classify, and analyse scoping documentation to accurately define engagement scope and approach.
• Manage client communications throughout engagements, ensuring:
  • Clarity on scope
  • Progress
  • Findings
  • Timelines
• Manage customer expectations regarding delivery, deadlines, and technical outcomes.
• Produce high-quality reports that clearly document:
  • Findings
  • Exploitation paths
  • Risk context
  • Remediation guidance
• Ensure timely finalisation of engagements, maintaining a high standard of efficiency and professionalism.
• Work with the Sales Team to support scoping activities and identify opportunities to expand services within client organisations.