Security Engineer, Offensive Security

About Us

Thrive is an innovative technology solutions provider focused on Cyber Security, Hybrid Cloud, Global Network Management, Disaster Recovery and traditional Managed Services. Our corporate culture, engineering talent, customer‑centric approach, and focus on Next Gen services help us stand out among our peers. Thrive is on the lookout for individuals who don't view their weekdays as a “job” but rather seek to develop valuable skills that ignite their passion and lead to a career.

If you're attracted to a work‑hard, play‑hard environment and seek the guidance, training and experience necessary to build a lucrative career, then welcome to THRIVE!

Thrive is looking for a security engineer to join our Offensive Security team. This team focuses on advanced vulnerability management and penetration testing as a service, delivering strategic security insights to clients based on the findings of these services. The role will own the delivery of these services, ensuring client satisfaction, timely and complete service delivery. The Security Engineer will work closely with the team to ensure services are delivered effectively, stay on top of industry best practices, and coordinate with internal teams at Thrive and serve as the primary contact for these services for clients.

The role will meet with customers to explain vulnerabilities found and or exploited, and assist with remediation steps. This engineering position requires attention to detail and a commitment to maintaining high security standards and fostering client trust in our cybersecurity capabilities.

• Execution and analysis of vulnerability scans and determination of remediation steps
• Execution and analysis of penetration tests (manual and autonomous), writing reports and delivering reports to client stakeholders
• Lead client meetings, offering expert advice and guidance as needed
• Collaborate with clients to understand their business needs and requirements to align remediation with business outcomes
• Create and maintain materials documenting our security processes, procedures, and technologies, including automated reports for relevant stakeholders
• Update client security presentations and discuss findings with clients
• Maintain a leading edge on security events and techniques to keep clients aware of new threats and attack techniques
• Other duties as required

• Solid understanding of network protocols, operating systems, application layer protocols, and security best practices
• Understanding of cybersecurity threats and experience with incident response standards and procedures
• Ability to communicate security information to non‑technical people
• Passion for Cyber Security
• Demonstrated comprehension of good security practices
• Knowledge of risk assessment tools, technologies and methods
• Knowledge of penetration testing methodologies, frameworks and tools

• Ability to analyze a large amount of data from various sources and use this information to solve complex problems and make good decisions; works effectively in a team environment and collaborates with stakeholders
• Excellent written and verbal communication skills
• Computer networking and security knowledge
• Vulnerability discovery and analysis skills
• Operating system internals expertise
• Familiarity with TCP/IP network protocols and application layer protocols (e.g., HTTP, SMTP, DNS, etc.)
• 3‑5 years of experience executing penetration tests, writing reports and delivering report debriefs to clients

• Knowledge of common Windows and Linux/Unix system calls and APIs
• Working knowledge of pentesting tools, such as Burp Suite, Metasploit framework, Caido
• Knowledge of programming and/or scripting languages (e.g., Python)
• One or more certifications such as eJPT, PJPT, Pen Test+, OSCP, GPEN, PNPT, CEH, Security+