Sr Offensive Security Engineer

About This Opportunity

Our talent team is representing a confidential global technology organization in their search for a Senior Offensive Security Engineer based in India. This is a hands-on role where you'll operate as an adversary—continuously identifying, exploiting, and helping remediate real-world security weaknesses across products, cloud infrastructure, networks, and organizational defenses.

You'll design and execute penetration tests, red team engagements, and adversary emulation exercises that validate detection capabilities and measurably reduce enterprise risk at scale. This position partners closely with Security Operations, Threat Intelligence, Vulnerability Management, Application Security, DevOps, and Product teams to transform offensive findings into prioritized, business-aligned remediation efforts.

Responsibilities

• Penetration Testing: Plan, scope, and execute internal and external penetration tests across web and mobile applications, APIs, cloud environments (AWS/Azure), networks, and infrastructure using real-world attacker techniques
• Red & Purple Teaming: Design and run adversary emulation and red team engagements combining multiple attack paths to accomplish objective-based goals; partner with SOC and Detection Engineering teams on purple team exercises to validate and improve detection coverage
• Exploit Development & Chaining: Identify, validate, and safely exploit vulnerabilities—including chaining lower-severity issues into high-impact attack paths—and demonstrate tangible business impact in production-representative environments
• Adversary Emulation: Model real-world threat actor tactics, techniques, and procedures (TTPs) mapped to the MITRE ATT&CK framework to test and strengthen organizational resilience, detection, and response capabilities
• Findings & Remediation: Review and validate findings for accuracy, prioritize real-world exploitability and business risk, create remediation tickets, and partner with engineering teams to drive fixes and coordinate retests within policy SLAs
• Tooling & Automation: Build and maintain custom scripts, tooling, and automation to scale offensive testing efforts and operationalize continuous testing platforms across the environment
• Reporting & Communication: Produce clear, decision-ready reports and executive summaries that translate technical findings into risk and business impact for technical stakeholders and executive leadership
• Incident Response Support: Support incident response and threat hunting efforts by providing offensive expertise, attack-path context, and adversary insight
• Continuous Improvement: Contribute to the maturity of the offensive security program through developing repeatable methodologies, playbooks, and metrics that demonstrate progress over time

What We're Looking For

Required Qualifications:

• 5+ years of hands-on experience in offensive security, penetration testing, red teaming, or closely related security engineering roles
• Demonstrated expertise across multiple domains: web/mobile application, API, network, infrastructure, and cloud (AWS and/or Azure) penetration testing
• Strong understanding of exploitation and post-exploitation techniques, attack-path chaining, and objective-based adversary emulation
• Proficiency with industry-standard offensive tooling such as Burp Suite Professional, Nmap, Metasploit, and Kali Linux, along with vulnerability scanners
• Proficiency in at least one scripting or programming language (Python, Go, PowerShell, Ruby, or Bash) to build custom tools and automation
• Working knowledge of the MITRE ATT&CK framework and hands-on experience mapping engagements to adversary TTPs
• Excellent written and verbal communication skills, with the ability to present findings to both technical audiences and executive leadership

Preferred Qualifications:

• Advanced offensive certifications (OSEP, OSCE³, CRTO, GXPN) and track record of original security research, CVEs, or responsible disclosures
• Experience with cloud-native attack techniques and container/Kubernetes (EKS/AKS) and serverless security testing
• Experience operating or evaluating continuous/autonomous penetration testing and breach-and-attack-simulation platforms
• Familiarity with detection engineering, SIEM/EDR platforms, and building purple team feedback loops into SOC content
• Knowledge of compliance and security frameworks
• Experience mentoring junior engineers and helping mature an offensive security program

How We Work with You

When you apply through Get A Job.ai, our recruiting team will review your profile and conduct an initial screening to understand your experience and career goals. If there's a strong match, we'll submit your candidacy to our client for consideration and guide you through their interview process. Please do not contact the client directly—all communication and coordination will flow through our team to ensure the best experience for you.

Pay

Compensation details will be discussed during the screening process based on your experience and qualifications.

Equal Employment Opportunity: Get A Job.ai is committed to providing equal employment opportunities to all qualified individuals regardless of race, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, veteran status, or any other characteristic protected by law.