Sr Offensive Security Engineer

First Advantage; India; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

First Advantage is seeking a Senior Offensive Security Engineer to lead hands-on offensive testing across web, mobile apps, APIs, cloud, and networks. You will design adversary emulation programs and run multi-path red team engagements to validate detection and response capabilities at scale.

The role requires 5+ years of hands-on offensive security experience, strong tooling skills (Burp Suite Pro, Nmap, Metasploit, Kali Linux), and proficiency in scripting to build custom tools.

Qualifications

• 5+ years hands-on experience in offensive security, penetration testing, red teaming, or closely related security engineering role.
• Expertise across web/mobile apps, APIs, networks, infrastructure, and cloud (AWS/Azure) testing.
• Proficiency with Burp Suite Pro, Nmap, Metasploit, Kali Linux; knowledge of vulnerability scanners.
• Proficient in at least one scripting language (Python, Go, PowerShell, Ruby, Bash) for tooling.
• Familiarity with MITRE ATT&CK framework and mapping engagements to adversary TTPs.

Responsibilities

• Plan, scope, and execute internal and external penetration tests across web, mobile, APIs, cloud, networks, and infrastructure.
• Design and run adversary emulation and red team engagements to validate detection and response capabilities.
• Identify, validate, and safely exploit vulnerabilities; cascade lower-severity issues into high-impact paths.
• Build custom tooling and automation to scale testing and reports.
• Produce clear, decision-ready reports and executive summaries; support incident response and threat hunting.

Skills

Penetration testing

Threat modeling

Adversary emulation

Red team

Purple team

Vulnerability assessment

Exploit development

Attack-path chaining

Technical reporting

MITRE ATT&CK

Tools

Burp Suite Pro

Nmap

Metasploit

Kali Linux

Job description

We are seeking a highly skilled and motivated Senior Offensive Security Engineer to join our Threat Management & Security Operations organization. In this hands‑on role, you will think and operate like an adversary — continuously finding, exploiting, and helping remediate real‑world weaknesses across First Advantage’s products, cloud infrastructure, networks, and people. You will design and execute penetration tests, red and purple team engagements, and adversary emulation exercises that validate our detection and response capabilities and measurably reduce enterprise risk at‑scale. This role partners closely with Security Operations, Threat Intelligence & Hunt, Vulnerability Management, Application Security, DevOps, and Product teams to turn offensive findings into prioritized, business‑aligned remediation. The ideal candidate is equally comfortable building custom tooling, chaining exploits across complex environments, and communicating impact clearly to both technical teams and executive leadership.

Plan, scope, and execute internal and external penetration tests across web and mobile applications, APIs, cloud (AWS/Azure), networks, and infrastructure using real‑world attacker techniques. Design and run adversary emulation and red team engagements that combine multiple attack paths to accomplish objective‑based goals. Identify, validate, and safely exploit vulnerabilities, including chaining lower‑severity issues into high‑impact attack paths. Model real‑world threat actor tactics, techniques, and procedures (TTPs) mapped to the MITRE ATT&CK framework. Review and validate findings for accuracy, prioritize real‑world exploitability and business risk, create remediation tickets, and partner with engineering teams to drive fixes and coordinate retests within policy SLAs.

Build and maintain custom scripts, tooling, and automation to scale offensive testing. Produce clear, decision‑ready reports and executive summaries that translate technical findings into risk and business impact. Support incident response and threat hunting efforts by providing offensive expertise, attack‑path context, and adversary insight. Contribute to the maturity of the offensive security program by developing repeatable methodologies, playbooks, and metrics.

5+ years of hands‑on experience in offensive security, penetration testing, red teaming, or a closely related security engineering role. Demonstrated expertise across multiple domains: web/mobile application, API, network, infrastructure, and cloud (AWS and/or Azure) penetration testing. Strong understanding of exploitation and post‑exploitation techniques, attack‑path chaining, and objective‑based adversary emulation. Proficiency with industry‑standard offensive tooling such as Burp Suite Professional, Nmap, Metasploit, and Kali Linux, along with vulnerability scanners. Proficiency in at least one scripting or programming language (e.g., Python, Go, PowerShell, Ruby, or Bash) to build custom tools and automation. Working knowledge of the MITRE ATT&CK framework and hands‑on experience mapping engagements to adversary TTPs. Excellent written and verbal communication skills, with the ability to present findings to both technical audiences and executive leadership.

Preferred: Advanced offensive certifications (e.g., OSEP, OSCE³, CRTO, GXPN) and a track record of original security research, CVEs, or responsible disclosures. Preferred: Experience with cloud‑native attack techniques and container/Kubernetes (EKS/AKS) and serverless security testing. Preferred: Experience operating or evaluating continuous/autonomous pen testing and breach-and-attack‑simulation platforms. Preferred: Familiarity with detection engineering, SIEM/EDR platforms, and building purple team feedback loops into SOC content. Preferred: Knowledge of compliance and security frameworks relevant to our environment. Preferred: Experience mentoring junior engineers and helping mature an offensive security program.