Only w2- Red Team / Offensive Security Analyst

Red Team / Offensive Security Analyst
Hybrid – New York, NY

Only W2 (No C2C)

Job Description / Responsibilities

Responsible for simulating cyberattacks on systems, networks, and applications to identify vulnerabilities before malicious actors can exploit them.

Security Testing & Assessments

• Conduct penetration testing on:
  – Web applications
  – Network and infrastructure
  – Desktops/Servers Linux and Windows
  – APIs, cloud environments, and mobile apps
• Perform vulnerability assessments using automated tools and manual techniques
• Simulate real-world cyberattacks to evaluate system resilience

Exploitation & Analysis

• Identify and exploit weaknesses in systems and applications
• Analyze security flaws, misconfigurations, and insecure code
• Test authentication systems, access controls, and network defenses
• Identify exploitable credentials and attack paths

Reporting & Documentation

• Document all findings, methodologies, and evidence of vulnerabilities
• Prepare detailed technical and executive reports
• Communicate risks and remediation recommendations to stakeholders

Remediation & Security Improvement

• Recommend solutions to address identified security gaps and vulnerabilities
• Work with development and infrastructure teams to implement fixes
• Validate remediation through re-testing and follow-ups

Tooling & Automation

• Use security tools such as:
  – Metasploit, Nmap, Burp Suite, Kali, Vulnerability Scanners, Pentera Console and Surface
• Develop scripts (Python, Bash) to automate testing processes
• Design custom exploits and testing methodologies

Continuous Learning & Threat Research

• Stay updated on:
  – Emerging threats
  – Exploitation techniques
  – Security vulnerabilities (OWASP, CVEs)
• Research new attack vectors and penetration testing techniques

Collaboration & Advisory

• Work with:
  – Security teams
  – Developers
  – IT operations and/or Infrastructure Teams
• Educate teams on secure coding and security best practices
• Support compliance, audits, and risk assessments