ВеликобританияSenior Offensive Security Engineer
1 мес. назад
ВеликобританияSenior
penetration testingvulnerability assessmentnetwork securitysecurity analysis
Senior role responsible for evaluating and strengthening security posture through vulnerability assessments and penetration testing.
О компании
- is an interactive entertainment company and an iconic gaming industry brand recognized worldwide for its multi-platform games and licensed products. owns and/or manages a portfolio of more than 400 games and franchises, including globally recognized brands such as Asteroids® , Centipede® , Missile Command® , Pong® , and RollerCoaster Tycoon® .
- The family of brands includes Digital Eclipse, Nightdive Studios, Infogrames, AtariAge, MobyGames, as well as Hipster Whale, Coatsink, Early Morning Studios, and Stormteller Games—spanning game development, publishing, and community experiences worldwide.
- operates internationally with offices in the US, UK, in France, Germany, Sweden, and India.
Обязанности
- As a Senior Offensive Security Engineer, you will play a crucial role in evaluating and strengthening the security posture of the organization's IT infrastructure, applications, and networks.
- Your primary responsibilities will include identifying and addressing security vulnerabilities through detailed assessments and hands-on penetration testing. You will work closely with cross-functional teams to enhance security measures and safeguard systems against potential threats.
Требования
- 3+ years of relevant experience in VAPT or cybersecurity-related roles.
Будет плюсом
- Experience with penetration testing simulations such as Hack The Box or Capture The Flag (CTF) exercises.
- Security Automation & Scripting: Proficiency in scripting languages (e.g., Python, Bash, or PowerShell) to automate security testing and reporting tasks.
- Security Governance & Vendor Management: Experience in Vendor Risk Assessments or IT Governance processes.
- Cultural Alignment: Demonstrated intellectual curiosity and a proven track record of continuous learning in the rapidly evolving security landscape.
- Hands-on experience with commercial and open-source tools/frameworks including Burp Suite, Metasploit, Core Impact, Scapy, AppScan, WebInspect, Qualys, Nessus, Nmap, SQLmap, and OWASP ZAP.
Другое
- Perform detailed vulnerability assessments on internal and external systems, networks, and applications.
- Utilize automated tools and manual techniques to identify security weaknesses.
- Execute penetration tests on IT infrastructure, web applications, mobile platforms, and network components.
- Simulate cyber-attacks to evaluate the effectiveness of existing security measures.
- AI Security: Familiarity with AI-powered security tools and AI/ML security considerations for detection, analysis, and hardening.
- Security Baselining: Experience designing, implementing, and maintaining secure configuration baselines across cloud and on-premise environments.
- Configuration Review: Experience performing configuration reviews of different security tools and platforms to identify misconfigurations and drive them to closure.
- Broad knowledge of security technologies related to applications, databases, networks, servers, Active Directory, and desktops.
- Support incident response efforts by assisting with root cause analysis (RCA) or incident containment.
- Analyze assessment and testing results to identify potential vulnerabilities and risks.
- Prepare comprehensive reports with actionable recommendations for remediation.
- Communicate findings effectively to both technical and non-technical stakeholders.
- Work closely with security, development, and operations teams to prioritize and remediate identified vulnerabilities.
- Assist in implementing security controls and solutions.
- Develop and maintain documentation related to assessment methodologies, findings, and remediation recommendations.
- Ensure all documentation remains updated and easily accessible.
- Stay updated with emerging cybersecurity threats, vulnerabilities, and industry best practices.
- Incorporate new knowledge and techniques into testing activities to improve effectiveness.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Strong understanding of network protocols, operating systems, and web technologies.
- Proficiency with security testing tools such as Nessus, Nmap, Burp Suite, Metasploit, and similar platforms.
- In-depth knowledge of IT security standards and frameworks such as OWASP, NIST, and SANS Top 25.
- Familiarity with the OSI model, TCP/IP model, and core networking concepts.
- Hands-on experience in manual penetration testing and security assessments.
- Experience with IoT/OT security will be considered an added advantage.
- Deep understanding of embedded protocols such as UART, I2C, SPI, JTAG, and SWD.
- Experience with radio protocol attacks involving BLE, Wi-Fi, LoRa, DSP, and SDR.
- Certifications such as CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), or equivalent are preferred.
- Travel may be required across the country for project execution, monitoring, assessments, testing activities, and coordination with geographically distributed teams, as and when required.
- Please submit your resume, a cover letter summarising your experience with the relevant technologies and tools listed above, and a link to your GitHub, portfolio, or any other relevant projects using the form below.