Offensive Security and Attack Surface Management - March - Remote - 9months +

For our international client, we are looking for an Offensive Security and Attack Surface Management. You will be required to focus on the technical identification of vulnerabilities across web applications, APIs, and cloud infrastructures, alongside the systematic discovery and monitoring of external assets to facilitate proactive risk reduction. 

Tasks

• Execution of penetration tests against web applications, APIs, networks, and cloud environments utilizing black-box, gray-box, and white-box methodologies.
• Identification and documentation of vulnerabilities, including OWASP Top 10 risks, misconfigurations, and privilege escalation paths.
• Creation of detailed penetration test reports containing technical risk ratings, documented attack paths, and remediation recommendations.
• Verification of technical remediation efforts through structured re-testing procedures
• Analysis of attack surface changes and documentation of exposure trends over time.
  Prioritization of technical findings based on exploitability and threat intelligence data.
• Provision of technical recommendations to engineering and DevOps teams regarding remediation strategies.
• Facilitating the technical security posture through the delivery of vulnerability assessments and attack surface documentation.

Requirements

• Strong project experience with Penetration Testing and Vulnerability Analysis
• Very good understanding of technical identification of vulnerabilities across web applications, APIs, and cloud infrastructures
• Experience in Discovery and inventory of external attack surface assets
• Experience with Development of custom scripts and automation tools for offensive security and Attack Surface Management (ASM) processes.
• Independent, structured and solution-oriented way of working
• Very good communication skills in English

Details

• Start: March
• Duration: 9months + (possible extension)
• Location: 100% Remote
• Occupancy: 5 days week
• Languages: Fluency in English

Telephone interview slots with our client can be arranged at short notice with a decision immediately thereafter.