Offensive Security Analyst

Remotedxb; Dubai; On-site; AED 180,000 - 300,000; Full time

Benefits offered by this job

Unlimited and mandatory PTO

Company matched 401k

Health insurance contributions (75% of

100% company contribution for dental/視

Flexible working hours

Choice of hardware and tools

Support for career development (paid**

Job summary

Sprocket Security is seeking a security-focused professional to triage and validate vulnerabilities surfaced by automation, refining findings in the Sprocket voice. You will calibrate severity and handle most issues independently, while feeding automation feedback to R&D and collaborating with service delivery teams.

The role leverages Python, OWASP Top 10 validation, and Generative AI tools like Claude, with flexible hours and opportunities for career development.

Qualifications

• Experience triaging or reproducing vulnerabilities from security tools (SAST/DAST/SCA/IAST).
• Proficiency in Python programming.
• Exposure to Generative AI tools such as Claude.
• Strong Development/IT/Infosec foundation.
• Ability to validate OWASP Top 10, network and authentication issues.
• Clear, detail-oriented written communication.
• Ability to manage a high-volume queue independently.

Responsibilities

• Triage, validate, and QA findings surfaced by automation to eliminate false positives.
• Author and refine findings to client-ready quality in the Sprocket voice.
• Calibrate severity based on real business impact.
• Handle the majority of findings independently and escalate complex cases as needed.
• Feed pattern-level signal back to R&D to tune attack automations.
• Script away repetitive validation steps.
• Partner with R&D and Service Delivery teams on automation feedback loops.

Skills

Vulnerability triage

Python programming

Generative AI tooling

OWASP Top 10 validation

Technical writing

High-volume queue management

Education

Degree in Computer Science/Engineering/IT

Security+ / eJPT / CPTS / PNPT

OSCP pursuit interest

Tools

SAST/DAST/SCA/IAST tools

Claude AI

Automation scripting

Job description

About the Company

Sprocket Security prioritizes offensive security for enterprises, empowering them to build robust defense strategies based on individual business risk through an expert-driven Continuous Penetration Testing platform.

Responsibilities

• Triage, validate, and QA findings surfaced by automation to eliminate false positives
• Author and refine findings to client-ready quality in the Sprocket voice
• Calibrate severity based on real business impact
• Handle the majority of findings independently and escape complex cases to Adversarial Engineers
• Feed pattern-level signal back to R&D to tune attack automations
• Script away repetitive validation steps
• Partner with R&D and Service Delivery teams on automation feedback loops

Requirements

• Professional experience triaging or reproducing vulnerabilities from security tools (SAST/DAST/SCA/IAST)
• Software programming experience, preferably Python
• Exposure to utilizing Generative AI tools like Claude
• Strong foundation in Development, IT, or Infosec
• Hands-on ability to validate OWASP Top 10, network, and authentication issues
• Clear, detail-oriented written communication skills
• Ability to manage a high-volume queue independently

Preferred Qualifications

• Security+, eJPT, CPTS, PNPT, or similar foundational credentials
• CTF achievements (HackTheBox, TryHackMe, PortSwigger Academy)
• Degree in Computer Science, Engineering, or IT
• Interest in pursuing OSCP or equivalent certifications

Benefits

• Unlimited and mandatory PTO
• Company matched 401k
• Health insurance contributions (75% for employees, 50% for dependents)
• 100% company contribution for dental and vision
• Flexible working hours
• Choice of hardware and tools
• Support for career development including paid training, conferences, and certifications