Atari - Senior Offensive Security Engineer
Requirements
• Educational Background • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. • Strong understanding of network protocols, operating systems, and web technologies. • Proficiency with security testing tools such as Nessus, Nmap, Burp Suite, Metasploit, and similar platforms. • In-depth knowledge of IT security standards and frameworks such as OWASP, NIST, and SANS Top 25. • Familiarity with the OSI model, TCP/IP model, and core networking concepts. • Hands-on experience in manual penetration testing and security assessments. • 3+ years of relevant experience in VAPT or cybersecurity-related roles. • Desired Eligibility (Medium Priority) • Experience with IoT/OT security will be considered an added advantage. • Deep understanding of embedded protocols such as UART, I2C, SPI, JTAG, and SWD. • Experience with radio protocol attacks involving BLE, Wi-Fi, LoRa, DSP, and SDR. • Certifications • Certifications such as CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), or equivalent are preferred. • Preferred / Nice-to-Have • Experience with penetration testing simulations such as Hack The Box or Capture The Flag (CTF) exercises. • Security Automation & Scripting: Proficiency in scripting languages (e.g., Python, Bash, or PowerShell) to automate security testing and reporting tasks. • Security Governance & Vendor Management: Experience in Vendor Risk Assessments or IT Governance processes. • Cultural Alignment: Demonstrated intellectual curiosity and a proven track record of continuous learning in the rapidly evolving security landscape. • Hands-on experience with commercial and open-source tools/frameworks including Burp Suite, Metasploit, Core Impact, Scapy, AppScan, WebInspect, Qualys, Nessus, Nmap, SQLmap, and OWASP ZAP. • Travel • Travel may be required across the country for project execution, monitoring, assessments, testing activities, and coordination with geographically distributed teams, as and when required. • To Apply • To Apply • Please submit your resume, a cover letter summarising your experience with the relevant technologies and tools listed above, and a link to your GitHub, portfolio, or any other relevant projects using the form below. • EEO Statement • EEO Statement
Responsibilities
• Conduct Vulnerability Assessments • Perform detailed vulnerability assessments on internal and external systems, networks, and applications. • Utilize automated tools and manual techniques to identify security weaknesses. • Perform Penetration Testing • Execute penetration tests on IT infrastructure, web applications, mobile platforms, and network components. • Simulate cyber-attacks to evaluate the effectiveness of existing security measures. • Security Operations & Hardening • AI Security: Familiarity with AI-powered security tools and AI/ML security considerations for detection, analysis, and hardening. • Security Baselining: Experience designing, implementing, and maintaining secure configuration baselines across cloud and on-premise environments. • Configuration Review: Experience performing configuration reviews of different security tools and platforms to identify misconfigurations and drive them to closure. • Broad knowledge of security technologies related to applications, databases, networks, servers, Active Directory, and desktops. • Support incident response efforts by assisting with root cause analysis (RCA) or incident containment. • Analyze and Report Findings • Analyze assessment and testing results to identify potential vulnerabilities and risks. • Prepare comprehensive reports with actionable recommendations for remediation. • Communicate findings effectively to both technical and non-technical stakeholders. • Collaborate with Teams • Work closely with security, development, and operations teams to prioritize and remediate identified vulnerabilities. • Assist in implementing security controls and solutions. • Maintain Documentation • Develop and maintain documentation related to assessment methodologies, findings, and remediation recommendations. • Ensure all documentation remains updated and easily accessible. • Stay Current with Cybersecurity Trends • Stay updated with emerging cybersecurity threats, vulnerabilities, and industry best practices. • Incorporate new knowledge and techniques into testing activities to improve effectiveness.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT