Red Team / Offensive Security Analyst

1. Security Testing & Assessments

• Conduct penetration testing on:
  • Web applications
  • Network and infrastructure
  • Desktops/Servers Linux and Windows
  • APIs, cloud environments, and mobile apps
• Perform vulnerability assessments using automated tools and manual techniques
• Simulate real-world cyberattacks to evaluate system resilience

2. Exploitation & Analysis

• Identify and exploit weaknesses in systems and applications
• Analyze security flaws, misconfigurations, and insecure code
• Test authentication systems, access controls, and network defenses
• Identify exploitable credentials and attack paths

3. Reporting & Documentation

• Document all findings, methodologies, and evidence of vulnerabilities
• Prepare detailed technical and executive reports
• Communicate risks and remediation recommendations to stakeholders

4. Remediation & Security Improvement

• Recommend solutions to address identified security gaps and vulnerabilities
• Work with development and infrastructure teams to implement fixes
• Validate remediation through re-testing and follow-ups

5. Tooling & Automation

• Use security tools such as:
  • Metasploit
  • Nmap
  • Burp Suite
  • Kali
  • Vulnerability Scanners
  • Pentera Console and Surface
• Develop scripts (Python, Bash) to automate testing processes
• Design custom exploits and testing methodologies

6. Continuous Learning & Threat Research

• Stay updated on:
  • Emerging threats
  • Exploitation techniques
  • Security vulnerabilities (OWASP, CVEs)
• Research new attack vectors and penetration testing techniques

7. Collaboration & Advisory

• Work with:
  • Security teams
  • Developers
  • IT operations and/or Infrastructure Teams
• Educate teams on secure coding and security best practices
• Support compliance, audits, and risk assessments

Years of Experience:

• 14 Years of Experience