Red Team / Offensive Security Analyst

Job Title: Red Team / Offensive Security Analyst

Location: Hybrid - New York, NY

Experience: 14+ Years

Job Description/ Responsibilities:

Responsible for simulating cyberattacks on systems, networks, and applications to identify vulnerabilities before malicious actors can exploit them.

1. Security Testing & Assessments

• Conduct penetration testing on:

• Web applications –
• Network and infrastructure –
• Desktops/Servers Linux and Windows –
• APIs, cloud environments, and mobile apps

• Perform vulnerability assessments using automated tools and manual techniques
• Simulate real-world cyberattacks to evaluate system resilience 2.

2. Exploitation & Analysis

• Identify and exploit weaknesses in systems and applications
• Analyze security flaws, misconfigurations, and insecure code
• Test authentication systems, access controls, and network defenses
• Identify exploitable credentials and attack paths

3. Reporting & Documentation

• Document all findings, methodologies, and evidence of vulnerabilities
• Prepare detailed technical and executive reports
• Communicate risks and remediation recommendations to stakeholders

4. Remediation & Security Improvement

• Recommend solutions to address identified security gaps and vulnerabilities
• Work with development and infrastructure teams to implement fixes
• Validate remediation through re-testing and follow-ups

5. Tooling & Automation

• Use security tools such as: – Metasploit, Nmap, Burp Suite, Kali, Vulnerability Scanners, Pentera Console and Surface
• Develop scripts (Python, Bash) to automate testing processes
• Design custom exploits and testing methodologies

6. Continuous Learning & Threat Research

• Stay updated on: o Emerging threats
• Exploitation techniques
• Security vulnerabilities (OWASP, CVEs)
• Research new attack vectors and penetration testing techniques

7. Collaboration & Advisory

• Work with:

• Security teams
• ii. Developers
• iii. IT operations and/or Infrastructure Teams
• iv. Educate teams on secure coding and security best practices • Support compliance, audits, and risk assessments