Cybersecurity Strategist

Senior Security Specialist

We are seeking an exceptional Senior Security Specialist with a strong background in offensive security and ability to test across various environments, including Web, Network, Mobile, Active Directory, and OT systems.

Job Responsibilities:

• Conduct thorough penetration tests on web applications, APIs, networks, cloud, and OT environments using various tools and techniques.
• Execute internal infrastructure and Active Directory exploitation using specialized software such as BloodHound, CrackMapExec, and Impacket.
• Perform OT/ICS/SCADA security testing, assessing protocols and firmware for potential vulnerabilities.
• Conduct comprehensive manual reviews to identify security flaws, insecure patterns, and logical vulnerabilities – SAST and DAST.
• Chain vulnerabilities to simulate real-world attack scenarios and provide proof-of-concepts.
• Team Leadership & Client Coordination
• Lead and mentor junior security analysts during engagements.
• Serve as technical lead for VAPT projects, ensuring timely delivery and quality assurance.
• Interface directly with clients to understand requirements, present findings, and suggest remediation strategies.
• Manage testing schedules, reporting timelines, and escalation workflows.
• Draft detailed vulnerability reports with actionable remediation advice.

Mandatory Requirements:

• 4–5 years of hands-on experience in penetration testing and red teaming.
• Strong understanding of OWASP Top 10, MITRE ATT&CK, and real-world threat simulation.
• Expertise in AD security, internal lateral movement, and domain privilege escalation.
• Familiarity with OT security controls, risk frameworks (NIST, IEC 62443), and protocol fuzzing.
• Scripting proficiency in Python, PowerShell, or Bash.
• Exposure to tools like Nmap, Wireshark, Burp Suite, Metasploit, BloodHound, SonarQube, Checkmarx, etc.
• Leadership experience in managing client-facing pentest projects.
• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• Excellent communication, documentation, and collaboration skills.

Additional Details:

• Immediate start preferred.
• Practical skills are essential.
• Bonus points for published CVEs, bug bounty recognition, open-source security tools, research contributions, or industry event participation.

Preferred Certifications:

• OSCP – Offensive Security Certified Professional.
• OSWE – Offensive Security Web Expert.
• CRTP – Certified Red Team Professional.
• CRTE – Certified Red Team Expert.
• CPENT – Certified Penetration Testing Professional.
• CEH – Certified Ethical Hacker.
• eJPT, eCPTX, CBBH, PNPT– or equivalent certifications in advanced adversarial simulation.