Offensive Security Consultant

About the role

The Offensive Security Consultant will lead hands‑on penetration testing and offensive security assessments for a diverse portfolio of local and global clients. You will work across infrastructure, applications, and emerging technology environments, delivering actionable hardening and mitigation strategies.

Key responsibilities

• Execute end‑to‑end offensive security engagements, including Red Team, Purple Team, external and internal network testing, web, mobile, thick‑client, and web3 assessments.
• Prepare, conduct, and document findings, providing risk‑based recommendations and professional client‑facing reports.
• Collaborate with client technical teams to validate gaps, discuss remediation, and ensure business‑relevant security improvements.
• Participate in all client meetings throughout the engagement lifecycle, from kickoff and scoping to final presentation.

Required profile

• Minimum 3 years of hands‑on experience in infrastructure, networking, systems administration, or related technical domains.
• At least 1 year of direct offensive security experience, including application or infrastructure penetration testing.
• Strong communication skills for clear documentation and presentation to both technical and non‑technical stakeholders.
• Self‑motivated, responsible, and capable of managing testing activities independently while contributing to a consulting team.

Required skills

• Proficiency with penetration testing tools such as Burp Suite, Kali Linux, Nmap, Metasploit, Nessus, and Wireshark.
• Familiarity with offensive security frameworks like OWASP, PTES, and MITRE ATT&CK.
• Solid understanding of TCP/IP, networking concepts, and common ports and protocols.
• Hands‑on experience with Active Directory, Windows domains, authentication flows, and privilege escalation techniques.