Offensive Security Engineer (f/m/d)

Responsibilities

We are representing a confidential retail technology organization seeking an Offensive Security Engineer to join their Cyber Defense team in Lille, France. This is a permanent position (CDI) working in a hybrid model.

As part of the offensive security function, you will simulate cyberattacks to identify vulnerabilities before they can be exploited, while supporting product and business teams in securing their assets:

• Application & Network Penetration Testing: Conduct in-depth penetration tests on web applications (OWASP Top 10), APIs (REST/GraphQL), internal infrastructure, and Active Directory environments.
• Cloud & Infrastructure Security Audits: Assess the security of cloud environments (AWS, GCP, Azure), identifying misconfigurations and privilege escalation paths.
• Adversary Simulation (Red Teaming): Participate in Red Team exercises simulating real-world TTPs (Tactics, Techniques, and Procedures) to test detection and response capabilities.
• Purple Teaming & SOC Collaboration: Work closely with the Blue Team/SOC to validate and enhance detection rules based on your technical findings.
• Reporting & Advisory: Produce clear audit reports including risk analysis and operational recommendations for both technical teams and decision-makers.

What We're Looking For

Experience: At least 3-4 years of operational experience in offensive security and penetration testing.

Technical Expertise:

• Strong skills in web/API auditing (OWASP vulnerabilities) and Active Directory environments
• Knowledge of IAM mechanisms and cloud security services across AWS, GCP, and Azure (Lambda, S3, Cloud Run, etc.)
• Proficiency in scripting and developing custom tooling (Python, Go, Bash, or PowerShell)
• Bonus: Experience with C2 frameworks (Sliver, Havoc, Cobalt Strike, Adaptix), EDR/AV evasion, malware development, and AI for cybersecurity applications

Tools & Technologies:

• Pentest/Red Team tools: Burp Suite Pro, C2 Frameworks, Metasploit, BloodHound
• Cloud & Infrastructure: AWS, GCP, Azure, Active Directory/Entra ID, Docker/Kubernetes
• Programming languages: Python, Go, Bash, PowerShell

Professional Qualities:

• Excellent communication skills to explain complex technical subjects to non-technical stakeholders (Product Owners, management)
• Team-oriented mindset with a passion for knowledge sharing and mentoring
• Intellectual curiosity, continuous monitoring of emerging threats (CVEs, CTFs), and impeccable ethical standards

Languages: Technical proficiency in English (written, reading, speaking) is required.

Certifications (Appreciated): OSCP, OSEP, OSED, CRTO, CRTL, or GRTP.

How We Work With You

Our talent team at Get A Job.ai partners with leading technology organizations to connect exceptional cybersecurity professionals with opportunities that match their skills and career goals. When you apply through our platform, a dedicated recruiter will screen your profile and guide you through the process. We will then submit qualified candidates directly to our client. Please do not contact the client organization directly—all communication should flow through Get A Job.ai to ensure a smooth and professional experience.

Pay

Compensation details will be discussed during the screening process with our recruiting team.

Equal Employment Opportunity: Get A Job.ai is committed to fostering an inclusive recruitment process. We welcome candidates from all backgrounds and experiences, and we are happy to accommodate any needs during the application and interview process.