Red Team​/Offensive Security Analyst

Responsible for simulating cyberattacks on systems, networks, and applications to identify vulnerabilities before malicious actors can exploit them.

• Conduct penetration testing on:
  • o Web applications –
  • o Network and infrastructure –
  • o Desktops/Servers Linux and Windows –
  • o APIs, cloud environments, and mobile apps
• Perform vulnerability assessments using automated tools and manual techniques
• Simulate real-world cyberattacks to evaluate system resilience

• a. Identify and exploit weaknesses in systems and applications
• b. Analyze security flaws, misconfigurations, and insecure code
• c. Test authentication systems, access controls, and network defenses
• d. Identify exploitable credentials and attack paths

• a. Document all findings, methodologies, and evidence of vulnerabilities
• b. Prepare detailed technical and executive reports
• c. Communicate risks and remediation recommendations to stakeholders

• a. Recommend solutions to address identified security gaps and vulnerabilities
• b. Work with development and infrastructure teams to implement fixes
• c. Validate remediation through re-testing and follow-ups

• Use security tools such as: – Metasploit, Nmap, Burp Suite, Kali, Vulnerability Scanners, Pentera Console and Surface
• b. Develop scripts (Python, Bash) to automate testing processes
• c. Design custom exploits and testing methodologies

• a. Stay updated on: o Emerging threats
• b. Exploitation techniques
• c. Security vulnerabilities (OWASP, CVEs)
• d. Research new attack vectors and penetration testing techniques

• a. Work with:
  • i. Security teams
  • ii. Developers
  • iii. IT operations and/or Infrastructure Teams
  • iv. Educate teams on secure coding and security best practices
• Support compliance, audits, and risk assessments