| Location | New York, NY |
Job Description Red Team / Offensive Security Analyst
Hybrid - New York, NY
BGV must be cleared to start
W2 Rate:$55/hr
Job Description/ Responsibilities
Responsible for simulating cyberattacks on systems, networks, and applications to identify vulnerabilities before malicious actors can exploit them.
o Web applications -
o Network and infrastructure -
o Desktops/Servers Linux and Windows -
o APIs, cloud environments, and mobile apps •
a. Identify and exploit weaknesses in systems and applications
b. Analyze security flaws, misconfigurations, and insecure code
c. Test authentication systems, access controls, and network defenses
d. Identify exploitable credentials and attack paths
a. Document all findings, methodologies, and evidence of vulnerabilities
b. Prepare detailed technical and executive reports
c. Communicate risks and remediation recommendations to stakeholders
a. Recommend solutions to address identified security gaps and vulnerabilities
b. Work with development and infrastructure teams to implement fixes
c. Validate remediation through re-testing and follow-ups
a. Use security tools such as: - Metasploit, Nmap, Burp Suite, Kali, Vulnerability Scanners, Pentera Console and Surface
b. Develop scripts (Python, Bash) to automate testing processes
c. Design custom exploits and testing methodologies
a. Stay updated on: o Emerging threats
b. Exploitation techniques
c. Security vulnerabilities (OWASP, CVEs)
d. Research new attack vectors and penetration testing techniques
a. Work with:
i. Security teams
ii. Developers
iii. IT operations and/or Infrastructure Teams
iv. Educate teams on secure coding and security best practices • Support compliance, audits, and risk assessments Years of Experience: 14.00 Years of Experience
Disclaimer: Diverse Lynx LLC is an Equal Opportunity Employer. All applicants and employees are evaluated without discrimination, based solely on their qualifications, ability, competence and performance. This email and its attachments may contain confidential or proprietary information and is intended only for the recipient(s). If you received this message in error, please disregard it and notify the sender. If you no longer wish to receive our communications, you may unsubscribe at any time.
Security Notice: Our official website is www.diverselynx.com We do not operate or authorize any other websites representing Diverse Lynx LLC.