Global Offensive Security Engineer

102 Crane Company; Stamford (CT); Remote; USD 120,000 - 180,000; Full time

Job summary

Crane Company is seeking an Information Security professional to join its Global Information Security Team. The role focuses on exploitative testing to inform risk analysis, with expertise in offensive security, scripting, and security tooling.

Collaboration across the SOC and purple-team exercises will be essential to mitigate risks and address security gaps. Responsibilities include security reviews, vulnerability assessment, testing methodologies, and reporting, with a strong emphasis on

Qualifications

• Minimum 5 years of work experience in penetration testing & application security testing.
• Strong understanding of Linux and Windows administration.
• Experience with offensive security tooling (Metasploit, Nmap, Burp Suite, etc.).
• Knowledge of attack surface management and threat intelligence is a plus.

Responsibilities

• Perform security reviews of enterprise systems, applications, and networks in coordination with local teams.
• Evaluate systems to identify vulnerabilities, misconfigurations, and exploitation vectors.
• Participate in vulnerability management processes and remediation planning.
• Create reports and remediation recommendations based on findings.
• Present findings to technical and non-technical audiences.
• Collaborate with vendors and third parties in testing development and execution.

Skills

Penetration testing

Linux administration

Windows administration

Scripting languages

Threat analysis

Communication

Project management

Education

Degree in related field or 5 years experience

OSCP/GPEN or similar certification (desirable)

Tools

Metasploit

Nmap

Burp Suite

Impacket

Burp Suite

Pretender

Job description

Crane Company is seeking an Information Security professional to join its Global Information Security Team. The role focuses on exploitative testing to inform risk analysis, with expertise in offensive security, scripting, and security tooling.

Collaboration across the SOC and purple-team exercises will be essential to mitigate risks and address security gaps. Responsibilities include security reviews, vulnerability assessment, testing methodologies, and reporting, with a strong emphasis on