Senior Offensive Security Engineer

United States Digital Space LLC; Newcastle upon Tyne; On-site; GBP 70,000 - 110,000; Full time

Job summary

United States Digital Space LLC is seeking a Senior Offensive Security Engineer to assess and strengthen security across IT infrastructure, applications, and networks. You will identify vulnerabilities, perform hands-on penetration testing, and collaborate with cross-functional teams to implement robust security controls.

The role requires the ability to conduct detailed assessments, prepare actionable remediation reports, and stay current with evolving cyber threats and best practices.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3+ years of relevant experience in VAPT or cybersecurity.
• Strong understanding of network protocols and web technologies.

Responsibilities

• Perform vulnerability assessments on internal and external systems, networks, and applications.
• Execute penetration tests on IT infrastructure, web applications, mobile platforms, and network components.
• Analyze assessment and testing results to identify vulnerabilities and risks.
• Communicate findings effectively to technical and non-technical stakeholders.
• Collaborate with security, development, and operations teams to remediate vulnerabilities.
• Maintain documentation related to methodologies, findings, and remediation.

Skills

Vulnerability assessment

Penetration testing

Security operations

Incident response

Security reporting

Education

Bachelor's degree in Computer Science or related field

Tools

Nessus

Nmap

Burp Suite

Metasploit

Core Impact

Scapy

AppScan

WebInspect

Qualys

OWASP ZAP

Job description

About the company

the company is an interactive entertainment company and an iconic gaming industry brand recognized worldwide for its multi-platform games and licensed products. the company owns and/or manages a portfolio of more than 400 games and franchises, including globally recognized brands such as *Asteroids®*, *Centipede®*, *Missile Command®*, *Pong®*, and *RollerCoaster Tycoon®*.

The the company family of brands includes Digital Eclipse, Nightdive Studios, Infogrames, AtariAge, MobyGames, as well as Hipster Whale, Coatsink, Early Morning Studios, and Stormteller Games—spanning game development, publishing, and community experiences worldwide.

the company operates internationally with offices in the US, UK, in France, Germany, Sweden, and India.

Overview

As a Senior Offensive Security Engineer, you will play a crucial role in evaluating and strengthening the security posture of the organization’s IT infrastructure, applications, and networks.

Your primary responsibilities will include identifying and addressing security vulnerabilities through detailed assessments and hands-on penetration testing. You will work closely with cross‑functional teams to enhance security measures and safeguard systems against potential threats.

What You’ll DoConduct Vulnerability Assessments

• Perform detailed vulnerability assessments on internal and external systems, networks, and applications.

• Utilize automated tools and manual techniques to identify security weaknesses.

Perform Penetration Testing

• Execute penetration tests on IT infrastructure, web applications, mobile platforms, and network components.

• Simulate cyber-attacks to evaluate the effectiveness of existing security measures.

Security Operations & Hardening

• AI Security: Familiarity with AI-powered security tools and AI/ML security considerations for detection, analysis, and hardening.

• Security Baselining: Experience designing, implementing, and maintaining secure configuration baselines across cloud and on‑premise environments.

• Configuration Review: Experience performing configuration reviews of different security tools and platforms to identify misconfigurations and drive them to closure.

• Broad knowledge of security technologies related to applications, databases, networks, servers, Active Directory, and desktops.

• Support incident response efforts by assisting with root cause analysis (RCA) or incident containment.

Analyze and Report Findings

• Analyze assessment and testing results to identify potential vulnerabilities and risks.

• Prepare comprehensive reports with actionable recommendations for remediation.

• Communicate findings effectively to both technical and non-technical stakeholders.

Collaborate with Teams

• Work closely with security, development, and operations teams to prioritize and remediate identified vulnerabilities.

• Assist in implementing security controls and solutions.

Maintain Documentation

• Develop and maintain documentation related to assessment methodologies, findings, and remediation recommendations.

• Ensure all documentation remains updated and easily accessible.

Stay Current with Cybersecurity Trends

• Stay updated with emerging cybersecurity threats, vulnerabilities, and industry best practices.

• Incorporate new knowledge and techniques into testing activities to improve effectiveness.

Requirements & QualificationsEducational Background

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Technical Skills

• Strong understanding of network protocols, operating systems, and web technologies.

• Proficiency with security testing tools such as Nessus, Nmap, Burp Suite, Metasploit, and similar platforms.

• In-depth knowledge of IT security standards and frameworks such as OWASP, NIST, and SANS Top 25.

• Familiarity with the OSI model, TCP/IP model, and core networking concepts.

• Hands‑on experience in manual penetration testing and security assessments.

Experience

• 3+ years of relevant experience in VAPT or cybersecurity-related roles.

Desired Eligibility (Medium Priority)

• Experience with IoT/OT security will be considered an added advantage.

• Deep understanding of embedded protocols such as UART, I2C, SPI, JTAG, and SWD.

• Experience with radio protocol attacks involving BLE, Wi-Fi, LoRa, DSP, and SDR.

Certifications

• Certifications such as CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), or equivalent are preferred.

Preferred / Nice-to-Have

• Experience with penetration testing simulations such as Hack The Box or Capture The Flag (CTF) exercises.

• Security Automation & Scripting: Proficiency in scripting languages (e.g., Python, Bash, or PowerShell) to automate security testing and reporting tasks.

• Security Governance & Vendor Management: Experience in Vendor Risk Assessments or IT Governance processes.

• Cultural Alignment: Demonstrated intellectual curiosity and a proven track record of continuous learning in the rapidly evolving security landscape.

• Hands‑on experience with commercial and open-source tools/frameworks including Burp Suite, Metasploit, Core Impact, Scapy, AppScan, WebInspect, Qualys, Nessus, Nmap, SQLmap, and OWASP ZAP.

Travel

Travel may be required across the country for project execution, monitoring, assessments, testing activities, and coordination with geographically distributed teams, as and when required.

EEO Statement

the company is an equal opportunity employer and we are committed to providing a workplace free from harassment and discrimination. We are committed to equal employment regardless of race, religion or lack thereof, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, medical condition, veteran status, ancestry, disability status, pregnancy, parental status, genetic information, political affiliation, or any other status protected by the laws or regulations in the locations where we operate.