Sporty Group - Offensive Security Engineer

Global - Remote - Hybrid - Europe *3mo ago

Remote Senior EMEA Cloud Computing Security Engineer Linux Bash Python Documentation Windows Server

Requirements

• 5+ years of hands-on experience in offensive security, perimeter penetration testing, network security assessments, red teaming, or adversary emulation. • Strong understanding of external asset discovery, DNS configuration vulnerabilities, and public IP network routing. • Practical experience auditing and testing Linux and Windows environments and underlying network services. • Proven ability to perform adversary emulation and bypass techniques against modern EDR/XDR solutions. • Familiarity with testing physical office network hardware, routers, switches, firewalls, and workplace IT systems. • Ability to turn external exposures and technical network risks into clear, actionable fixes for IT and Security teams. • Experience with core web vulnerabilities and limited, scoped testing of modern API interfaces. • Strong scripting ability in Python, PowerShell, Bash, or similar to automate perimeter mapping, emulation workflows, and asset discovery. • Good understanding of scanning, reconnaissance, and interception tools. • Strong documentation skills. • OffSec: OSCP / OSCP+, OSEP, OSWE, OSED, OSCE3 (or legacy OSCE), OSWA, OSMR, OSEE • OSCE3 (or legacy OSCE) • Hack The Box: CPTS, CBBH, CWEE, CAPE • Red Team / Active Directory: CRTO, CRTL (Zero-Point Security); CRTP, CRTE, CRTM (Altered Security) • GIAC: GPEN, GXPN, GWAPT, GRTP, GCPN • Other recognized: PNPT (TCM Security), eCPPT / eWPTX / eMAPT (INE), BSCP (PortSwigger), CREST CRT / CCT, CPTE • Bug bounty recognition: bounty awards, hall-of-fame listings, or published CVEs through HackerOne, Bugcrowd, Intigriti, YesWeHack, or vendor-run programs. • Bug bounty recognition: • CTF achievements: active player on a ranked CTFtime team, Hack The Box Hall of Fame or Pro Lab completions, or finalist/podium placements in recognized competitions (DEF CON CTF, Google CTF, HTB Business CTF, SANS Holiday Hack, and similar). • CTF achievements:

Responsibilities

• Scope, plan, and execute full-scope red team engagements and long-horizon adversary emulation campaigns mapped to real threat-actor TTPs and the MITRE ATT&CK framework. • Execute the complete attack chain: OSINT and reconnaissance, initial access (phishing, payload delivery, public-facing exploitation), establishing and operating covert C2, persistence, privilege escalation, lateral movement, and domain/cloud takeover. • Develop and deploy custom tooling, payloads, and C2 infrastructure; build and maintain resilient, OPSEC-safe redirector and command-and-control environments. • Research and weaponize EDR/XDR evasion and bypass techniques — in-memory execution, process injection, AMSI/ETW tampering, and defense-evasion tradecraft — against CrowdStrike, SentinelOne, and Microsoft Defender XDR. • Compromise Active Directory and hybrid/cloud identity: Kerberos attacks, ACL and delegation abuse, ADCS exploitation, and lateral movement across on-prem and cloud infrastructure (AWS). • Run assumed-breach, insider-threat, and social-engineering scenarios, including physical and office-network intrusion paths where in scope. • Work directly with the Blue Team to replay attack chains, validate and tune detections, and measurably close detection and response gaps. • Document full attack narratives, kill-chain diagrams, and reproducible proof-of-concept steps that let defenders rebuild and detect every stage. • Translate operational findings into prioritized, actionable remediation and detection-engineering guidance for IT, Network, and Security teams. • Track operational metrics: objectives achieved, detection and response times, dwell time, evasion success rates, and remediation follow-through. • Contribute to maturing Sporty's red team capability and threat-informed defense, sharing tradecraft with internal offensive and defensive staff.

Benefits

• Sporty is a remote-first company in pursuit of sustainability • A competitive salary plus individual performance-based bonuses every quarter • 28 days paid annual leave • Core working hours of 10am-3pm in your local time zone, with flexibility outside of these hours • Referral bonuses and flash bonuses • Top-of-the-line equipment • Annual company retreats that provide opportunities to connect and collaborate with colleagues from around the world • Interview Process: • Remote video screening with our Talent Acquisition Team • Online assessment via Hackerrank • Remote video interview with Team Members (60 Mins) • Final discussion with the hiring manager (60 mins) • If you're interested, we encourage you to apply. Every application is reviewed by a member of our team, and we aim to respond within 48 hours.