Offensive Security Engineer

Etiya; Fatih; On-site; TRY 260,000 - 380,000; Full time

Job summary

Etiya seeks an Offensive Security Specialist to conduct security assessments across applications, infrastructure, Kubernetes environments and AI/LLM‑based systems, and to perform security‑focused code reviews and remediation support.

You will plan and execute tests, validate vulnerabilities with PoCs, and collaborate with development teams to strengthen defenses while reporting findings clearly in English. A minimum of 2 years in offensive security is required.

Qualifications

• 2+ years of professional offensive security experience with hands-on testing across web apps, APIs and enterprise infra.
• Strong understanding of common vulnerabilities, attack techniques and testing methodologies.
• Experience testing authentication, authorization and business logic in web apps and APIs.
• Hands-on Kubernetes security testing including RBAC, service accounts, secrets management and privilege escalation scenarios.
• AI/LLM security testing including prompt injection and data disclosure.
• Proficiency with Burp Suite, Nmap, and manual validation beyond automated scans.

Responsibilities

• Plan and execute penetration tests within scopes and rules of engagement.
• Perform manual security testing of web applications, APIs and enterprise infrastructure.
• Assess Kubernetes clusters and container workloads for misconfigurations, access control weaknesses and exploitable attack paths.
• Test AI/LLM-based applications for prompt injection, sensitive data disclosure, model abuse and unauthorized actions through integrated tools.
• Contribute to cloud security assessments according to project requirements and experience.
• Perform security-focused source code reviews and static application security testing (SAST) to identify vulnerabilities in application code.
• Review and triage code scanning findings, validate their exploitability and impact, filter out false positives and prioritize confirmed vulnerabilities for remediation.
• Validate vulnerabilities and develop controlled PoCs to demonstrate their technical and business impact.
• Prepare clear reports covering evidence, reproduction steps, risk assessment and remediation recommendations.
• Work with development and infrastructure teams to explain findings, recommend fixes and perform targeted retesting to verify remediation.
• Support Red Team engagements and attack scenario development under the guidance of senior team members.
• Develop scripts and utilities to improve testing efficiency and consistency.
• Research emerging vulnerabilities and attack techniques relevant to the environments being assessed.
• Contribute to the improvement of testing methodologies, internal documentation and team knowledge sharing.

Skills

Penetration testing

Kubernetes security

AI/LLM security testing

Python scripting

Vulnerability analysis

Report writing

Education

BS/MS in Computer Engineering or Cyber Security or related field

Tools

Burp Suite

Nmap

Exploitation tools

Job description

Etiya seeks an Offensive Security Specialist to conduct security assessments across applications, infrastructure, Kubernetes environments and AI/LLM‑based systems, and to perform security‑focused code reviews and remediation support.

You will plan and execute tests, validate vulnerabilities with PoCs, and collaborate with development teams to strengthen defenses while reporting findings clearly in English. A minimum of 2 years in offensive security is required.