Offensive Security Engineer

We're Hiring | Offensive Security Engineer (Red Team / Penetration Testing) Location: Bengaluru Experience: 13 Years Company Description ISECURION is a CERT-In empanelled and ISO 27001:2022 certified cybersecurity consulting company that helps organizations strengthen their security posture in a complex digital environment. The team focuses on practical, business-oriented security solutions that support compliance, risk reduction, and long-term cyber resilience. Services include Vulnerability Assessment & Penetration Testing (VAPT), compliance audits, cloud security, DFIR, risk assessments, and managed security services. ISECURION works closely with clients to identify security gaps, prioritize remediation, and align with industry best practices and regulatory standards. The company is driven by a passionate team committed to research, innovation, and delivering meaningful security outcomes. Responsibilities Conduct Web, API, Network, Cloud, and Active Directory Penetration TestsExecute Red Team and Adversary Emulation engagementsPerform privilege escalation, lateral movement, and post-exploitation activitiesAssess Azure, AWS, and modern enterprise environmentsBuild and improve offensive tooling, scripts, and automationDevelop attack simulations aligned to the MITRE ATT&CK frameworkCollaborate with Product Engineering to convert real attack techniques into BAS contentDeliver high-quality technical and executive reportsSupport Purple Team exercises and detection validation Qualifications Hands-on offensive security experience in enterprise environments Strong working knowledge of: Active DirectoryWindows & Linux environmentsWeb & API securityNetwork penetration testingCloud security (Azure / AWS / GCP)Python and PowerShell (Go, Rust, or C# is an added advantage) Preferred Certifications Candidates holding one or more of the following certifications (or equivalent practical experience) are preferred: OSCPCRTOCPTSOSEPCRTEPNPTeCPPTOSWE Advantageous Experience Red Team operationsEDR evasionMalware developmentC2 frameworks (Sliver, Havoc, Mythic, Cobalt Strike, etc.)Purple teamingMITRE ATT&CK framework applicationAI/LLM securitySecurity research and open-source tooling contributionsPublished write-ups, CVEs, or conference talks How to Apply Interested candidates may submit their rsum on careers@isecurion.com along with supporting work samples such as GitHub profiles, blogs, portfolios, research publications, CVEs, or technical write-ups .