Offensive Security Sr. Analyst (mwd)

Responsibilities

Support execution of penetration tests across web applications, enterprise infrastructure, cloud environments, and industrial systems under the guidance of senior team members; Assist in conducting security assessments of custom and third-party web applications, enterprise applications, and cloud-based and hybrid environments; Participate in vulnerability validation, attack surface analysis, and security testing activities; Document findings and contribute to technical reports including vulnerability descriptions, risk assessments, and remediation recommendations; Support presentation of assessment results to stakeholders; Assist in research activities related to emerging threats, attack techniques, and security tools

Requirements

Successfully completed a university degree in (Business) Informatics, Computer Science, Cyber Security, or a comparable IT-related field — or equivalent practical experience; Initial experience in cyber security, basic understanding of web application security testing, network and infrastructure security concepts, and vulnerability assessment methodologies; Basic understanding of Windows and Linux operating systems; Familiarity with networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, and Active Directory concepts; Basic knowledge of cloud platforms and cloud security concepts; Exposure to common offensive security tools; Understanding of common web application vulnerabilities (OWASP Top 10); Interest in offensive security, threat emulation, and penetration testing methodologies; Curiosity and willingness to continuously learn new technologies and attack techniques; Ability to work effectively both independently and as part of a team; Fluent English communication skills

Nice to have

Knowledge of OT/ICS security concepts is beneficial but not required