Offensive Security Consultant

WorkNest Secure (US); United States; On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Pension/401k contribution

Subsidised gym membership

Frequent team events

Private Healthcare (individual)

Learning Allowance

Job summary

WorkNest Cyber Inc. is seeking an Offensive Security Consultant to join our expanding US team, focusing on infrastructure and web app testing. You will perform formal penetration testing, produce written reports, and assist with pre‑engagement activities such as scoping and proposals.

You should have proven penetration testing experience across Windows and Linux, strong AD and wireless knowledge, and professional certifications. Excellent communication is essential.

Qualifications

• Proven experience in application and infrastructure pentesting.
• Strong knowledge of Windows and Linux environments including Active Directory.
• Ability to design and conduct social engineering campaigns (phishing/vishing).
• Familiarity with OWASP, PTES, and other pentesting standards.
• Understanding of modern web app architectures and deployment models.
• Ability to write scripts or code in preferred languages.
• Bachelor-level degree in CS/Engineering or related field; relevant security certs.

Responsibilities

• Perform formal and comprehensive application, infrastructure and other penetration testing assessments where appropriate and required.
• Provide well-written, concise, technical and non-technical reports in English.
• Perform vulnerability assessments and provide findings with remediation actions.
• Support pre-engagement activities including scoping and proposal drafting.
• Manage and deliver penetration testing project activities within deadlines.
• Support QA to ensure high-quality client reports per SLA.
• Other duties aligned with skill and experience.

Skills

Penetration testing

Windows

Linux

Active Directory

Social engineering

OWASP/ PTES

Web apps

Programming/scripting

Network fundamentals

Virtualisation

Education

Bachelor's degree in CS/Engineering/Ethical Hacking

Security certifications (OSCP/CEH/GPEN)

Job description

WorkNest Cyber Inc, part of the WorkNest group, is rapidly expanding in the US and helps organisations strengthen their security posture through world‑class expertise. To support this growth, we are seeking Offensive Security Consultants to join our business.

As a Offensive Security Consultant, with a focus on Infrastructure and Web App testing, you will perform formal and comprehensive penetration testing assessments, producing full written reports to appropriate standards and within agreed deadlines. In addition, you will support with client pre‑engagement activities, including scoping and proposal drafting, as well as researching infrastructure and application vulnerabilities, following responsible disclosure, and sharing such findings within the team.

Responsibilities:

• Perform formal and comprehensive application, infrastructure and other penetration testing assessments where appropriate and required
• Provide well‑written, concise, technical and non‑technical reports in English
• Perform vulnerability assessments and provide findings with remediation actions
• Support with various client pre‑engagement interactions, including scoping activities and proposal drafting to ensure that client needs are met
• Manage and deliver penetration testing project activities within strict deadlines
• Support the QA process to ensure high quality client reports are delivered in accordance with applicable Service Level Agreement (SLA)
• Any other appropriate job duties in line with the associated skill and experience of the post holder

Skills and experience required:

• Proven industry experience in application and infrastructure penetration testing
• Deep knowledge of assessing both Windows and Linux environments, including strong knowledge of Active Directory and wireless technologies
• Ability in preparing and launching social engineering campaigns (both phishing and vishing)
• Strong understanding of OWASP, PTES and other penetration testing methodologies
• Knowledge of how modern web apps are designed, developed and deployed across different platforms
• Ability to program or script in your preferred language
• Relevant degree in Computer Science, Ethical Hacking, Engineering or other relevant subject
• Relevant security qualifications (such as OSCP, CEH, GPEN)
• Good knowledge and understanding of network and OS principles
• Good knowledge of various operating systems
• Good knowledge of virtualisation

Nice to have:

• Knowledge of assessing cloud and hybrid environments (AWS and Azure)
• Knowledge of assessing mobile applications (iOS/Android)
• Knowledge of assessing hardware and embedded IoT devices

Personal Attributes:

• Excellent spoken and written communication skills with strong attention‑to‑detail and accuracy
• A passion for security and networks
• Analytical and problem‑solving skills with a can‑do attitude and the ability to think laterally
• Self‑motivation with a commitment to continued development
• Ability to work independently and as part of a team
• Influencing and negotiation skills with the ability to build relationships at all levels
• Willingness to learn
• 25 days annual holiday plus 8 paid public holidays
• An additional day’s annual holiday for your birthday
• Pension/401k contribution
• Subsidised gym membership
• Frequent team events
• Private Healthcare (individual cover only)
• Learning Allowance Benefit

This is an exciting opportunity to join a fast‑growing team at WorkNest Cyber Inc and play a key role in delivering high‑quality offensive security services across a diverse range of client environments.

If you are passionate about offensive security, enjoy solving complex technical challenges, and are looking to further develop your career in a collaborative and forward‑thinking environment, we would love to hear from you.