Offensive Security Engineer at Applaudo

About You

You are an analytical and disciplined Offensive Security Engineer passionate about identifying and mitigating security vulnerabilities across modern applications and cloud environments. You thrive in fast-paced environments where proactive security testing, continuous improvement, and technical excellence are critical to protecting business-critical solutions. You enjoy performing hands-on penetration testing, researching emerging threats, and collaborating with engineering teams to strengthen application security. You communicate technical findings clearly and provide actionable recommendations that help teams build more secure software.

Competencies

• Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, or a related field is desired, or equivalent professional experience.
• 3+ years of hands-on experience in Penetration Testing or Offensive Security.
• Proven experience performing penetration tests for web, mobile, and cloud-based applications.
• Strong knowledge of vulnerability research, exploitation techniques, and security assessment methodologies.
• Hands-on experience with industry-standard security tools such as Burp Suite, Metasploit, Nmap, and custom scripting.
• Familiarity with Threat Intelligence, attacker TTPs, and the MITRE ATT&CK framework.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills, with the ability to present technical findings to both technical and non-technical audiences.
• Experience collaborating with Development, DevOps, and Security teams.
• Advanced English proficiency.
• Offensive Security certifications such as OSCP, OSWE, OSCE, OSWP, eCPPT, eWPT, CEH, GPEN, GXPN, or similar are highly desirable.

Responsibilities

• Plan, scope, and execute penetration tests across web, mobile, and cloud-based applications.
• Identify, exploit, validate, and document security vulnerabilities using manual and automated testing techniques.
• Develop testing strategies aligned with organizational security objectives and compliance requirements.
• Leverage threat intelligence, attacker TTPs, and emerging security trends to continuously improve testing methodologies.
• Collaborate with application owners, DevOps teams, and Security Engineers throughout the assessment lifecycle.
• Prepare clear, actionable security reports, including findings, exploitation details, risk assessments, and remediation recommendations.
• Support engineering teams in validating fixes and improving the overall security posture of applications.