Offensive Security Specialist (Red Team)

Würth Phoenix; Bolzano; Ibrido; EUR 40.000 - 80.000; Tempo pieno

Descrizione del lavoro

Unisciti a un'azienda innovativa come Specialista di Sicurezza Offensiva nel nostro team Red. Sarai responsabile della pianificazione e dell'esecuzione di simulazioni di attacco mirate, contribuendo a migliorare la sicurezza delle applicazioni strategiche. In questo ruolo cruciale, testerai e migliorerai le capacità di rilevamento e risposta dell'organizzazione, redigendo report dettagliati e collaborando con team interni. Offriamo un ambiente di lavoro dinamico, opportunità di formazione continua e un pacchetto retributivo competitivo. Se sei appassionato di sicurezza informatica e desideri affrontare sfide stimolanti, questa è l'opportunità che fa per te.

Servizi

Formazione continua

Orari di lavoro flessibili

Certificazioni finanziate dall'azienda

Assicurazione contro gli infortuni

Assicurazione sanitaria integrativa

Ambiente di lavoro dinamico

Attività sportive e culturali

Competenze

• 3+ years of experience in penetration testing and red teaming.
• Strong knowledge of security frameworks like OWASP and MITRE ATT&CK.

Mansioni

• Plan and execute penetration tests on various infrastructures.
• Identify vulnerabilities and propose corrective measures.
• Draft reports on offensive activities for stakeholders.

Conoscenze

Penetration Testing

Red Teaming

Social Engineering

Problem-Solving

Scripting (Python, PowerShell, Bash)

Vulnerability Analysis

Formazione

Degree in Computer Science

Degree in Cybersecurity

Strumenti

Burp Suite

Metasploit

Sliver

BloodHound

Descrizione del lavoro

Category : R&D Location : Bolzano/Full Remote

Offensive Security Specialist (Red Team)

Are you a system breacher, adept at uncovering hidden vulnerabilities? Join our Red Team and put your skills to the test by planning and executing targeted attack simulations, developing and integrating custom tools for penetration testing and post-exploitation, thereby contributing to the security of strategically important applications.

As an Offensive Security Specialist, you will play a crucial role in identifying and exploiting vulnerabilities on both on-premises and cloud platforms, with the goal of continuously testing and improving the organization’s detection and response capabilities. You will provide detailed reports and contribute to the overall strengthening of corporate security.

Responsibilities:

• Plan and execute penetration tests and red teaming activities on systems, applications, networks, cloud and physical infrastructures.
• Identify vulnerabilities and gaps in clients’ security postures and propose detailed, practical corrective measures to mitigate identified risks.
• Simulate realistic attacks to assess the effectiveness of security controls and detection and response capabilities.
• Collaborate with internal teams to support secure application development and infrastructure protection.
• Contribute to the creation and improvement of custom attack tools, scripts, and testing methodologies.
• Draft technical and strategic reports to communicate offensive activity results to clients and internal stakeholders.
• Monitor and emulate emerging trends in threat actors’ techniques, tactics, and procedures (TTPs).

Requirements:

• Degree in Computer Science, Cybersecurity, or related fields, or equivalent industry experience.
• At least 3 years of experience in penetration testing, red teaming, and social engineering activities.
• Practical knowledge of tools such as Burp Suite, Metasploit, Sliver, BloodHound, and similar.
• In-depth knowledge of Windows and Linux operating systems, with particular attention to their vulnerabilities and cybersecurity implications.
• Familiarity with security frameworks and standards, such as OWASP, MITRE ATT&CK, and NIST.
• Good knowledge of scripting languages (e.g., Python, PowerShell, Bash) to automate attack and analysis activities.
• Ability to analyze and exploit vulnerabilities in applications, systems, and cloud infrastructures.
• Excellent problem-solving skills and results-oriented mindset.
• Autonomy in managing work tasks, as well as in communication with clients and stakeholders.

Nice to have:

• Knowledge of distributed cloud systems (AWS, Azure, GCP, Kubernetes) and related security implications.
• Experience in secure software development lifecycle and supply chain attacks.
• Certifications in offensive security, such as OSCP, OSEP, CRTO, and/or cloud certifications (AWS Security Specialty, Azure Security Engineer, CKS).
• Familiarity with advanced penetration testing techniques, exploit development, and red teaming.

We offer:

• Collaboration with a highly qualified and motivated team.
• Continuous training to maintain and develop professional skills.
• Engagement in international projects involving leading security technologies and frameworks.
• Opportunities to obtain market-leading certifications funded by the company.
• Flexible working hours and the possibility of remote work to ensure a proper work-life balance.
• Competitive compensation package, including a company MBO incentive system.
• Company production bonus convertible into a wide range of Welfare goods and services.
• Accident insurance and supplementary health insurance.
• A young and dynamic work environment that constantly promotes events dedicated to all collaborators, such as sports activities, informal dinners, cultural visits, etc.