Job Title: Lead – Offensive Security
Department: Security Assurance Team
Key Responsibilities:
- Plan, coordinate, and execute periodic offensive security testing, including:
- Vulnerability Assessments
- Penetration Testing
- WiFi Security Testing
- Network Segmentation Testing
- PCI-DSS ASV Scan
- Active Directory Security Audits
- Red Teaming exercises
- Perform cloud security assessments (AWS & Azure), identifying misconfigurations, security gaps, and architectural flaws.
- Conduct CVE analysis, prioritize risks, and track remediation activities.
- Ensure timely execution of security testing, risk mitigation, and alignment with compliance programs.
- Collaborate with development, DevOps, and IT teams to remediate vulnerabilities and implement security best practices.
- Generate comprehensive reports detailing findings, remediation recommendations, and status tracking.
- Lead meetings with asset owners to explain vulnerabilities, recommend solutions, and promote security awareness.
Education & Experience:
- Bachelor's degree in Computer Science or a related field.
- Minimum 3 years of experience in cybersecurity, preferably in offensive security roles.
- Relevant certifications highly recommended: CEH, ECSA, CHFI, or equivalent cybersecurity credentials.
- Strong understanding of penetration testing, vulnerability management, patching practices, and advanced threat mitigation strategies.
- Proficiency with IT security tools and platforms, including:
- Anti-malware, Firewalls, IPS, DLP
- Web proxies, Email Security
- Cloud Security (AWS & Azure)
- Privileged Access Management & IAM
- Familiarity with security frameworks and standards: OWASP, NIST 800-64, PCI-DSS, ISO 27001, GDPR.
- Excellent communication, interpersonal, and presentation skills.
- Strong organizational, time management, and teamwork capabilities.
