Senior Offensive Security Engineer

About This Opportunity

We are representing a confidential interactive entertainment organization in their search for a Senior Offensive Security Engineer based in Newcastle upon Tyne. Our client operates internationally and requires a skilled security professional to strengthen their IT infrastructure, applications, and network security posture through comprehensive vulnerability assessments and penetration testing.

Responsibilities

Conduct Vulnerability Assessments

• Perform detailed vulnerability assessments on internal and external systems, networks, and applications
• Utilize automated tools and manual techniques to identify security weaknesses

Perform Penetration Testing

• Execute penetration tests on IT infrastructure, web applications, mobile platforms, and network components
• Simulate cyber-attacks to evaluate the effectiveness of existing security measures

Security Operations and Hardening

• Work with AI-powered security tools and address AI/ML security considerations for detection, analysis, and hardening
• Design, implement, and maintain secure configuration baselines across cloud and on-premise environments
• Perform configuration reviews of security tools and platforms to identify misconfigurations and drive remediation
• Apply broad knowledge of security technologies related to applications, databases, networks, servers, Active Directory, and desktops
• Support incident response efforts through root cause analysis and incident containment

Analyze and Report Findings

• Analyze assessment and testing results to identify potential vulnerabilities and risks
• Prepare comprehensive reports with actionable recommendations for remediation
• Communicate findings effectively to both technical and non-technical stakeholders

Collaborate with Teams

• Work closely with security, development, and operations teams to prioritize and remediate identified vulnerabilities
• Assist in implementing security controls and solutions

Maintain Documentation

• Develop and maintain documentation related to assessment methodologies, findings, and remediation recommendations
• Ensure all documentation remains updated and easily accessible

Stay Current with Cybersecurity Trends

• Stay updated with emerging cybersecurity threats, vulnerabilities, and industry best practices
• Incorporate new knowledge and techniques into testing activities to improve effectiveness

What We're Looking For

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field
• 3+ years of relevant experience in VAPT or cybersecurity-related roles
• Strong understanding of network protocols, operating systems, and web technologies
• Proficiency with security testing tools such as Nessus, Nmap, Burp Suite, Metasploit, and similar platforms
• In-depth knowledge of IT security standards and frameworks such as OWASP, NIST, and SANS Top 25
• Familiarity with the OSI model, TCP/IP model, and core networking concepts
• Hands-on experience in manual penetration testing and security assessments
• Certifications such as CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), or equivalent are preferred

Desired Additional Skills

• Experience with IoT/OT security
• Deep understanding of embedded protocols such as UART, I2C, SPI, JTAG, and SWD
• Experience with radio protocol attacks involving BLE, Wi-Fi, LoRa, DSP, and SDR
• Experience with penetration testing simulations such as Hack The Box or Capture The Flag (CTF) exercises
• Proficiency in scripting languages (e.g., Python, Bash, or PowerShell) to automate security testing and reporting tasks
• Experience in Vendor Risk Assessments or IT Governance processes
• Hands-on experience with commercial and open-source tools/frameworks including Core Impact, Scapy, AppScan, WebInspect, Qualys, SQLmap, and OWASP ZAP
• Demonstrated intellectual curiosity and a proven track record of continuous learning in the rapidly evolving security landscape

Travel Requirements

Travel may be required for project execution, monitoring, assessments, testing activities, and coordination with geographically distributed teams, as needed.

How We Work With You

When you apply through Get A Job.ai, our recruitment team will carefully review your qualifications and experience. If your profile matches what our client is seeking, we'll schedule a screening conversation to discuss the role in detail and answer your questions.

Following our screening, we'll submit qualified candidates to our client for their consideration. Our team will support you throughout the interview process and assist with negotiations if an offer is extended.

Important: Please apply only through Get A Job.ai. Do not attempt to contact the client directly, as this may disqualify your application.

Pay

Compensation details will be discussed during the screening process based on your experience and qualifications.

Equal Employment Opportunity

Get A Job.ai is committed to providing equal employment opportunities to all qualified applicants regardless of race, color, religion, sex, national origin, age, disability, or any other protected characteristic under applicable law.