Offensive Security Specialist

We are seeking an experienced Offensive Security Specialist to manage and execute security assessment workstreams across the organisation. The successful candidate will coordinate with internal stakeholders and external security vendors, conduct penetration testing, assess vulnerability risks, and drive remediation activities to closure.

Key Responsibilities

• Lead and coordinate with appointed security vendors across workstreams such as Vulnerability Assessments, Penetration Testing, Source Code Reviews, Risk Assessments and Red Team exercises.
• Perform periodic penetration testing of web applications and related systems.
• Analyse identified vulnerabilities and validate their severity, impact and potential business risk.
• Review risk assessments conducted by internal teams and external vendors.
• Develop and manage assessment schedules, remediation plans and agreed timelines.
• Work closely with application owners, technology teams and business stakeholders to ensure vulnerabilities are remediated promptly.
• Track outstanding security findings, risk acceptances and remediation actions through to closure.
• Prepare management reports and security dashboards covering findings, remediation status, risk exposure and emerging trends.
• Present assessment results and actionable recommendations to technical teams, management and other stakeholders.
• Verify remediation measures through retesting and supporting evidence.
• Support improvements to vulnerability management and offensive security processes.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or a related discipline.
• Approximately 5 to 6 years of relevant experience in penetration testing, vulnerability assessment or offensive security.
• Hands-on experience testing web applications, APIs, networks and supporting infrastructure.
• Good understanding of common vulnerabilities, including the OWASP Top 10, and recognised security testing methodologies.
• Experience coordinating external security vendors and managing multiple assessment workstreams.
• Ability to evaluate technical vulnerabilities and communicate their business impact.
• Experience preparing security dashboards, management reports and remediation tracking.
• Strong stakeholder management, analytical and communication skills.
• Ability to manage schedules, priorities and remediation deadlines independently.

Preferred Qualifications

• Relevant certifications such as OSCP, CREST, GPEN, CEH or equivalent.
• Familiarity with security testing tools such as Burp Suite, Nessus, Nmap, Metasploit or similar platforms.
• Knowledge of secure coding practices, source code review and risk assessment frameworks.
• Experience conducting or coordinating Red Team exercises.
• Experience working in a regulated or enterprise environment.

please send your cv/resume to [email protected]