Offensive Security Analyst - Red Team

Smart IT Frame LLC; New York (NY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Smart IT Frame LLC is seeking an experienced Red Team / Offensive Security Analyst for a hybrid role in New York, NY. The position focuses on conducting penetration tests, vulnerability assessments, and simulated attacks across applications, networks, infrastructure, and cloud environments to strengthen security postures.

You will document findings, collaborate with security and development teams, and help drive remediation through reports, testing methodologies, and automation.

Qualifications

• Experience in red team operations and offensive security.
• Strong penetration testing and vulnerability assessment skills.
• Web application, API, network and cloud security expertise.
• Proficiency with offensive security tooling (Metasploit, Nmap, Burp Suite, Kali Linux).
• Scripting in Python and Bash; ability to develop automation.
• Knowledge of OWASP, CVEs, and threat intelligence.

Responsibilities

• Conduct penetration testing of web apps, APIs, networks, infrastructure, Linux and Windows systems, cloud environments, and mobile apps.
• Perform vulnerability assessments using automated and manual methods.
• Simulate real-world cyberattacks to evaluate security controls and resilience.
• Identify exploitable vulnerabilities and validate findings; analyze weaknesses in auth and access controls.
• Document vulnerabilities with methodologies and evidence; produce detailed and executive summaries.
• Collaborate with development, security, and operations to remediate findings and validate fixes.
• Develop testing methodologies and PoCs for authorized assessments; create automation scripts.

Skills

Red Team Operations

Offensive Security

Penetration Testing

Web App Security

API Security

Network Security

Linux Security

Windows Security

Cloud Security

Exploitation Techniques

Attack Path Analysis

Metasploit

Nmap

Burp Suite

Kali Linux

Pentera

Python Scripting

Bash Scripting

OWASP

CVE Knowledge

Vulnerability Reporting

Remediation Validation

Stakeholder Communication

Tools

Metasploit

Nmap

Burp Suite

Kali Linux

Pentera Console

Job description

Job Title: Red Team / Offensive Security Analyst

Location: Hybrid – New York, NY

Long Term Contract

About Smart IT Frame:

At Smart IT Frame, we connect top talent with leading organizations across the USA. With over a decade of staffing excellence, we specialize in IT, healthcare, and professional roles, empowering both clients and candidates to grow together.

Job Summary

We are seeking an experienced Red Team / Offensive Security Analyst to conduct penetration testing, vulnerability assessments, and simulated cyberattacks across applications, networks, infrastructure, and cloud environments. The ideal candidate will identify security weaknesses, analyze potential attack paths, document findings, and collaborate with security and development teams to strengthen the organization's security posture.

Key Responsibilities

1. Security Testing & Vulnerability Assessments

• Conduct penetration testing of web applications, APIs, networks, infrastructure, Linux and Windows systems, cloud environments, and mobile applications.
• Perform vulnerability assessments using automated tools and manual testing techniques.
• Simulate real-world cyberattacks to evaluate security controls and system resilience.

2. Exploitation & Security Analysis

• Identify and validate exploitable vulnerabilities in systems and applications.
• Analyze security flaws, misconfigurations, insecure code, and weaknesses in authentication and access controls.
• Assess network defenses, exposed credentials, and potential attack paths.

3. Reporting & Documentation

• Document vulnerabilities, testing methodologies, and supporting evidence.
• Prepare detailed technical reports and executive-level summaries.
• Communicate security risks, business impact, and remediation recommendations to stakeholders.

4. Remediation & Security Improvements

• Recommend corrective actions to address identified vulnerabilities and security gaps.
• Collaborate with development, infrastructure, and IT operations teams to implement security fixes.
• Conduct retesting and follow-up assessments to validate remediation.

5. Security Tools & Automation

• Use offensive security tools, including Metasploit, Nmap, Burp Suite, Kali Linux, vulnerability scanners, and Pentera Console and Surface.
• Develop automation scripts using Python and Bash.
• Create custom testing methodologies and proof-of-concept exploits for authorized security assessments.

6. Threat Research & Continuous Learning

• Stay current with emerging cyber threats, exploitation techniques, OWASP guidance, and CVEs.
• Research new attack vectors, vulnerabilities, and penetration testing methodologies.
• Apply current threat intelligence to security assessments.

7. Collaboration & Security Advisory

• Work closely with security teams, developers, infrastructure teams, and IT operations.
• Provide guidance on secure coding practices and security best practices.
• Support compliance initiatives, security audits, and risk assessments.

Required Skills

• Red Team Operations and Offensive Security
• Penetration Testing and Vulnerability Assessment
• Web Application and API Security
• Network and Infrastructure Security
• Linux and Windows Security
• Cloud and Mobile Application Security
• Exploitation Techniques and Attack Path Analysis
• Metasploit, Nmap, Burp Suite, and Kali Linux
• Pentera Console and Surface
• Python and Bash Scripting
• OWASP and CVE Knowledge
• Vulnerability Reporting and Remediation Validation
• Security Risk Assessment and Stakeholder Communication