Offensive Security Engineer

Are you a master of proactive defense, someone who thrives on uncovering weaknesses before adversaries can exploit them? Do you possess a keen eye for detail, a passion for ethical hacking, and a drive to protect critical digital assets on a global scale? Sporty Group invites a highly skilled Offensive Security Engineer to join our fully remote, worldwide team. This isn't just a job; it's a mission to fortify our digital fortress, pushing the boundaries of security testing and transforming insights into impenetrable defenses. If you're ready to make a significant impact by challenging our systems, enhancing our posture, and collaborating with a world-class team, we want to hear from you.

Overview

As our Offensive Security Engineer, you will play a pivotal role in strengthening Sporty’s offensive security posture. Your mission involves proactively testing and identifying vulnerabilities across our external perimeter, standalone virtual private servers (VPS), physical office infrastructure, and endpoint defenses. This role owns the security testing, continuous perimeter monitoring, and reconnaissance across all Sporty Group external domains, websites, public IP blocks, and DNS configurations. You will work closely with our IT, Network Engineering, SOC, and Security teams to convert external discovery, adversary emulation on EDR/XDR systems, and exploitation insights into finely tuned perimeter controls, robust firewall rules, and robust defensive guardrails.

Key Responsibilities

Monitor, map, and rigorously test Sporty’s entire external attack surface, encompassing all Sporty Group external domains, subdomains, websites, and public IP addresses.
Conduct sophisticated adversary emulation exercises against internal and office endpoints to thoroughly validate the effectiveness of our EDR, XDR, and SOC monitoring platforms.
Evaluate the security posture of physical office hardware, corporate network equipment, and internal edge infrastructure, identifying areas for enhancement.
Perform scoped offensive testing, including penetration testing and vulnerability assessments, on critical systems and applications to uncover potential security gaps.
Lead continuous perimeter monitoring and reconnaissance efforts, staying ahead of emerging threats and potential attack vectors.
Collaborate closely with IT, Network Engineering, and Security Operations teams to ensure findings are communicated effectively and translated into actionable defensive improvements.
Develop and maintain security testing frameworks and tools to automate and streamline offensive security operations.

Requirements

Demonstrable experience, typically more than three years, in an offensive security role such as Penetration Tester, Red Team Engineer, or Security Consultant.
Profound understanding of offensive security methodologies, including reconnaissance, vulnerability assessment, exploitation, and post-exploitation techniques.
Hands-on experience with industry-standard security testing tools like Nmap, Metasploit, Burp Suite, Cobalt Strike, or similar.
Solid grasp of networking protocols, operating systems (Windows, Linux, macOS), and web application security principles.
Proficiency in scripting or programming languages such as Python, Go, or Ruby for developing custom tools and automating tasks.
Experience with cloud security assessments and understanding of common vulnerabilities in AWS, Azure, or GCP environments.
Familiarity with EDR/XDR systems and experience performing adversary emulation exercises against them.
Excellent communication skills, both written and verbal, with the ability to articulate complex technical issues to diverse audiences.
Relevant industry certifications like OSCP, OSCE, or SANS GIAC are highly regarded.

What You'll Gain

The opportunity to significantly impact the security posture of a rapidly growing global company.
Work with cutting-edge technologies and a dynamic team in a fully remote, supportive environment.
Unleash your creativity in security testing and contribute to robust defensive strategies.
Continuous learning and professional development opportunities to expand your offensive security expertise.
A competitive compensation package reflecting your skills and contributions.
The flexibility and autonomy of a worldwide remote role, allowing you to work from wherever you thrive.