Offensive Security Engineer: Red Team & App Pentest

International Turnkey Systems - ITS; Kuwait City; On-site; KWD 28,000 - 45,000; Full time

Job summary

International Turnkey Systems (ITS) is seeking a Cybersecurity Offensive Security Specialist to conduct advanced security assessments across web apps, APIs, mobile apps, networks, cloud, IoT and OT. You will simulate real-world cyberattacks and provide actionable remediation to improve our security posture.

You will lead red team exercises, perform external/internal penetration testing, and deliver high-quality reports to technical and business stakeholders, guiding remediation and validation

Qualifications

• 4+ years of hands-on penetration testing experience.
• Experience in Red Teaming, Web Application Security, API Security Testing, Mobile Security Assessments, IoT/OT Security Assessments.
• Bachelor's degree in a cybersecurity-related field.

Responsibilities

• Conduct advanced red team exercises simulating real-world threat actors.
• Perform external and internal penetration testing across networks and systems.
• Assess web applications and APIs for OWASP/secure coding weaknesses.
• Evaluate mobile app security (Android/iOS) and IoT/OT device security.
• Produce high-quality security assessment reports and present findings to stakeholders.

Skills

Red Teaming

Threat Emulation

Penetration Testing Methodologies

MITRE ATT&CK

Cyber Kill Chain

Scripting & Automation

Education

Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or related field

Tools

Burp Suite Professional

Postman

JWT, OAuth2, OpenID Connect

MobSF

Frida

Objection

APKTool

JADX

Burp Suite Mobile Testing

Job description

International Turnkey Systems (ITS) is seeking a Cybersecurity Offensive Security Specialist to conduct advanced security assessments across web apps, APIs, mobile apps, networks, cloud, IoT and OT. You will simulate real-world cyberattacks and provide actionable remediation to improve our security posture.

You will lead red team exercises, perform external/internal penetration testing, and deliver high-quality reports to technical and business stakeholders, guiding remediation and validation