Security Engineer II (Offensive)

Qualifications

• Education: Bachelor's degree in Computer Science, Cyber Security, Software Engineering or a related technical discipline, or equivalent practical experience.
• Core Experience: indicative range [1 to 3 years] of hands on experience in penetration testing, security operations or a closely related technical role.
• Foundational Offensive Skills: exposure to manual web application testing, CTF style exploitation or vulnerability research, gained through work experience, personal projects or study.
• SecOps & Forensics Familiarity: basic working knowledge of SIEM concepts, EDR tooling or network packet analysis, and an interest in frameworks such as MITRE ATT&CK.
• Technical Language Foundation: comfort reading and, ideally, writing scripts in a language such as Python to support testing and automation.
• AI Security Awareness: a working interest in the OWASP Top 10 for LLMs and how adversarial testing of AI features differs from traditional application testing.
• Regulatory Awareness: a general understanding of standards such as PCI-DSS, SOC 2 or DORA, with willingness to build practical depth on the job. Highly Preferred Certifications
• Hands-On Offensive & Red Team: OSCP, OSCE or SANS GXPN (GIAC Exploit Researcher and Advanced Penetration Tester).
• Incident Response & Defence: GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst) or a specialised Blue Team certification. Skills and Abilities
• Combines an aggressive, attacker's mindset used to find vulnerabilities with the analytical discipline required to write clear, actionable detection rules.
• Stays calm and analytically clear under intense pressure during active, live breach events or business critical system failures.
• Communicates exploit chains and log anomalies clearly, turning technical detail into a plain, high impact risk profile for non-technical leadership.
• Resilience and analytical clarity in high-pressure scenarios, supporting transparent communication and contributing to risk-based decisions during active security incidents or compressed financial product launch windows.
• Balances technical risk reduction with business enablement, supporting security infrastructure that serves as a competitive advantage and helps unblock global revenue and enterprise-client acquisition.
• Modern AI Security: OffSec OSAI (Offensive Security AI Red Teamer).