Offensive Security Specialist

Expected Responsibilities:

Conducting offensive security activities, including penetration testing and Red Team operations, across web applications, enterprise infrastructure, cloud environments, and industrial systems. 

Planning, executing, and leading advanced penetration tests for: 

• Custom and third-party web applications

• Complex enterprise applications (e.g., ERP, legacy systems, industrial platforms).

• Cloud-native and hybrid architecture.

Documenting findings in high-quality technical reports, including: 

• Clear risk ratings

• Business impactanalysis

• Actionableremediationrecommendations

Presenting results to technical and non-technical stakeholders, including engineering teams, management, and customers. 

Advising on risk mitigation strategies, secure design principles, and defensive improvements.

Professional Experience & Background

• Successfully completed university degree in (Business) Informatics, Computer Science, or a comparable IT-related field — or equivalent professional experience.

• Hands-on experience in: 

• Web applicationpenetrationtesting

• Infrastructure and network penetrationtesting

• Security testing of complex, business-critical applications

• Experience working in industrial or chemical company environments is a plus.

Technical Skills & Knowledge

• Strong understanding of Windows and Linux client/server environments.

• Practical experience with cloud platforms, including identity, networking, and cloud-native services.

• In-depth knowledge and hands-on usage of offensive security tools.

• Knowledge of secure software development lifecycle (SSDLC) and common vulnerability classes (e.g., OWASP Top 10).

• Programming and scripting skills are a plus.

• Experience with Red Teaming, adversary simulation, and attack-chain methodology.

• Familiarity with source code review and static/dynamic application security testing.

• Knowledge of OT / ICS security is desirable.