Offensive Security Engineer

About the role

Applaudo is looking for an analytical and disciplined Offensive Security Engineer to identify and mitigate vulnerabilities across modern web, mobile, and cloud applications. You will work in a fast‑paced environment, performing hands‑on penetration testing, researching emerging threats, and collaborating closely with development and DevOps teams to improve security posture.

Key responsibilities

• Plan, scope, and execute penetration tests for web, mobile, and cloud‑based applications.
• Identify, exploit, validate, and document security vulnerabilities using manual and automated techniques.
• Develop testing strategies aligned with security objectives and compliance requirements.
• Leverage threat intelligence, attacker TTPs, and emerging trends to continuously refine testing methodologies.
• Collaborate with application owners, DevOps, and security engineers throughout the assessment lifecycle.
• Prepare clear, actionable security reports with findings, risk assessments, and remediation recommendations.
• Support engineering teams in validating fixes and enhancing overall application security.

Required profile

• Bachelor’s degree in IT, Computer Science, Cybersecurity or equivalent professional experience.
• 3+ years of hands‑on penetration testing or offensive security experience.
• Proven experience testing web, mobile, and cloud applications.
• Strong analytical, troubleshooting, and problem‑solving abilities.
• Excellent written and verbal communication skills in English.
• Experience working with development, DevOps, and security teams.
• Relevant offensive security certifications (e.g., OSCP, OSWE, OSCE, OSWP, eCPPT, eWPT, CEH, GPEN, GXPN) are highly desirable.

Required skills

• Penetration testing of web, mobile, and cloud applications.
• Vulnerability research and exploitation techniques.
• Burp Suite, Metasploit, Nmap, and custom scripting.
• Threat intelligence analysis.
• MITRE ATT&CK framework.
• Offensive security certifications such as OSCP, OSWE, OSCE, etc.