Azure & Entra ID Offensive Security Lead (Contractor)

Applaudo; Región Metropolitana de Santiago; On-site; CLP 32,000,000 - 48,000,000; Full time

Job summary

Applaudo seeks an experienced offensive security professional focused on Microsoft Entra ID, Azure privilege escalation, and identity-driven attack paths. Start from approved footholds and demonstrate privilege escalation and control efficacy across two Azure tenants, with documented, reversible actions.

You will maintain timestamped records, explain attack paths to cloud admins, and ensure tests cause no disruption while documenting posture-only observations for clients.

Qualifications

• End to end offensive security experience with recon, exploitation, privilege escalation and reporting.
• Offensive testing of Microsoft Entra ID and Azure RBAC, including IAM constructs.
• Hands-on Azure offensive tooling experience with listed tools.
• Ability to operate in controlled production cloud environments and maintain precise records.

Responsibilities

• Lead identity and Azure boundary testing across two Azure tenants.
• Start from approved footholds and pursue privilege escalation through Entra IDs and RBAC.
• Assess cross-subscription and cross-tenant movement under controlled conditions.
• Ensure removal of artifacts and provide evidence-based posture observations.

Skills

End to end offensive security

Microsoft Entra ID testing

Azure RBAC testing

Azure offensive tooling

Token abuse understanding

English communication

Education

Bachelor's degree in CS/Cybersecurity/Software Engineering

Tools

ROADtools

AzureHound/BloodHound

AADInternals

MicroBurst

GraphRunner

Defender for Cloud

Job description

Applaudo seeks an experienced offensive security professional focused on Microsoft Entra ID, Azure privilege escalation, and identity-driven attack paths. Start from approved footholds and demonstrate privilege escalation and control efficacy across two Azure tenants, with documented, reversible actions.

You will maintain timestamped records, explain attack paths to cloud admins, and ensure tests cause no disruption while documenting posture-only observations for clients.