Azure & Entra ID Offensive Security Engineer (2 Months)

Applaudo; Bogotá; Sur place; COP 10 000 000 - 14 000 000; Plein temps

Résumé du poste

Applaudo is seeking an experienced offensive security professional to perform identity- and cloud-bounded testing across two Azure tenants. You will begin from approved footholds ranging from standard users with MFA to workload identities and escalate privileges through Entra ID roles, Azure RBAC, and service principals.

You will document attack paths end-to-end, chain findings with application-layer evidence, and ensure all actions are reversible and well timestamped for post-incident review.

Qualifications

• End-to-end offensive security experience across recon, exploitation, privilege escalation, lateral movement, and reporting.
• Experience testing Microsoft Entra ID and Azure RBAC, including managed identities and service principals.
• Hands-on experience with Azure offensive tooling such as ROADtools, AzureHound/BloodHound, AADInternals, MicroBurst or GraphRunner.
• Cross-subscription and cross-tenant attack path analysis.

Responsabilités

• Lead identity and Azure boundary testing across two Azure tenants.
• Start from approved footholds and attempt privilege escalation through Entra ID roles, Azure RBAC, managed identities and service principals.
• Assess AKS workloads with workload identity abuse and pod-to-node escalation.
• Report each objective with evidence or mark as blocked with what stopped the attempt.
• Remove all created artifacts before testing ends.

Connaissances

End-to-end offensive security

Microsoft Entra ID

Azure RBAC

Privilege escalation

Threat modeling & reporting

English communication

Formation

Bachelor's degree or equivalent

Outils

ROADtools

AzureHound/BloodHound

AADInternals

MicroBurst

GraphRunner

Description du poste

Applaudo is seeking an experienced offensive security professional to perform identity- and cloud-bounded testing across two Azure tenants. You will begin from approved footholds ranging from standard users with MFA to workload identities and escalate privileges through Entra ID roles, Azure RBAC, and service principals.

You will document attack paths end-to-end, chain findings with application-layer evidence, and ensure all actions are reversible and well timestamped for post-incident review.