Cyber Offensive Specialist

About the role

The Cyber Offensive Specialist will lead proactive threat hunting, penetration testing and vulnerability management activities across IT, OT and critical infrastructure environments. The role focuses on identifying security weaknesses, delivering actionable intelligence and continuously improving the organization’s offensive security posture.

Key responsibilities

• Plan, coordinate and execute quarterly threat hunting and penetration testing campaigns.
• Maintain a centralized security findings tracker and ensure timely remediation of identified issues.
• Run the annual Vulnerability Assessment and Penetration Testing (VAPT) program for IT, OT and stadium environments.
• Leverage threat‑intelligence platforms, monitor indicators of compromise and block malicious activity.
• Operate and enhance the monthly Vulnerability Management program, escalating high‑risk findings.
• Develop and update a Cyber Offensive knowledge base covering attack surface analysis and escalation paths.
• Provide security recommendations, align assessments with MITRE ATT&CK and OWASP Top 10, and drive automation of offensive tasks.
• Manage application security scanning, support secure SDLC practices and assist with web security hardening.
• Act as a red‑team specialist, simulating attacker behavior and producing threat intelligence reports for SOC and leadership.

Required profile

• Proven experience in threat hunting, penetration testing and vulnerability assessment.
• Strong understanding of OT and critical infrastructure security.
• Ability to work with cross‑functional teams including SOC, IT, OT and external vendors.

Required skills

• Threat Hunting
• Penetration Testing
• Vulnerability Assessment & Management
• MITRE ATT&CK framework
• OWASP Top 10
• Threat Intelligence platforms
• Application security scanning
• Secure Software Development Lifecycle (SDLC)
• Red‑team operations
• Automation of offensive security processes