Offensive Security Engineer (f/m/d)

Responsibilities

We are representing a confidential retail technology organization seeking an Offensive Security Engineer for their Cyber Defense team in Paris. In this permanent (CDI) role, you will simulate attacks to identify vulnerabilities before they can be exploited, while supporting business and product teams in securing their assets:

• Application & Network Penetration Audits: Conduct in-depth penetration testing on web applications (OWASP Top 10), APIs (REST/GraphQL), as well as internal infrastructures and Active Directory environments.
• Cloud & Infrastructure Security Audits: Evaluate the security of cloud environments (AWS, GCP, Azure) and identify misconfigurations and privilege escalation paths.
• Red Teaming: Participate in Red Team exercises simulating real-world TTPs (Tactics, Techniques, and Procedures) to test detection and response capabilities.
• Purple Teaming & SOC Collaboration: Work closely with the Blue Team/SOC to validate and enhance detection rules based on your technical findings.
• Reporting & Advisory: Produce clear audit reports including risk analysis and operational recommendations for technical teams and decision-makers.

What We're Looking For

• Experience: At least 3-4 years of operational experience in offensive security/penetration testing.
• Technical Mastery:
  • Strong skills in web/API auditing (OWASP vulnerabilities) and Active Directory environments.
  • Knowledge of IAM mechanisms and cloud security across AWS, GCP, and Azure (Lambda, S3, Cloud Run, etc.).
  • Proficiency in scripting and custom tool development (Python, Go, Bash, or PowerShell).
  • Bonus: Experience with C2 frameworks (Sliver, Havoc, Cobalt Strike, Adaptix), EDR/AV bypass, malware development, and AI applications in cybersecurity.
• Core Tools: Burp Suite Pro, C2 Frameworks, Metasploit, BloodHound, Docker/Kubernetes.
• Communication Skills: Excellent ability to explain complex technical topics to non-technical stakeholders (Product Owners, management).
• Team Spirit: Strong collaboration skills, enthusiasm for knowledge sharing and mentoring.
• Continuous Learning: Intellectual curiosity, ongoing awareness of emerging threats (CVEs, CTFs), and impeccable ethical standards.
• Languages: Technical English proficiency (written, read, spoken).
• Certifications (Appreciated): OSCP, OSEP, OSED, CRTO, CRTL, or GRTP.

How We Work with You

Candidates apply directly through Get A Job.ai. Our talent team will screen your application and coordinate interviews. Once we identify a strong match, we submit your profile to our client for consideration. Please do not contact the client directly—all communication flows through our recruiting team to ensure a professional, streamlined process.

Pay

Compensation details will be discussed during the screening process based on your experience and qualifications.

Equal Opportunity: Get A Job.ai is committed to inclusive hiring practices. We welcome candidates from all backgrounds and encourage applications from individuals of diverse experiences, identities, and abilities.