Offensive Security Analyst

Job Title: Offensive Security Analyst Location: New York, NYWork Arrangement: Hybrid OnsiteEmployment Type: W2 ContractJob Description:Responsible for simulating cyberattacks on systems, networks, and applications to identify vulnerabilities before malicious actors can exploit them.1. Security Testing & Assessments• Conduct penetration testing on:o Web applications –o Network and infrastructure –o Desktops/Servers Linux and Windows –o APIs, cloud environments, and mobile apps• Perform vulnerability assessments using automated tools and manual techniques• Simulate real-world cyberattacks to evaluate system resilience 2.2. Exploitation & Analysisa. Identify and exploit weaknesses in systems and applicationsb. Analyze security flaws, misconfigurations, and insecure codec. Test authentication systems, access controls, and network defensesd. Identify exploitable credentials and attack paths3. Reporting & Documentationa. Document all findings, methodologies, and evidence of vulnerabilitiesb. Prepare detailed technical and executive reportsc. Communicate risks and remediation recommendations to stakeholders4. Remediation & Security Improvementa. Recommend solutions to address identified security gaps and vulnerabilitiesb. Work with development and infrastructure teams to implement fixesc. Validate remediation through re-testing and follow-ups5. Tooling & Automation a. Use security tools such as: – Metasploit, Nmap, Burp Suite, Kali, Vulnerability Scanners, Pentera Console and Surfaceb. Develop scripts (Python, Bash) to automate testing processesc. Design custom exploits and testing methodologies6. Continuous Learning & Threat Researcha. Stay updated on: o Emerging threatsb. Exploitation techniquesc. Security vulnerabilities (OWASP, CVEs)d. Research new attack vectors and penetration testing techniques7. Collaboration & Advisory a. Work with:i. Security teamsii. Developersiii. IT operations and/or Infrastructure Teamsiv. Educate teams on secure coding and security best practices• Support compliance, audits, and risk assessmentsWork Authorization: Applicants must be legally authorized to work in the United States.Equal Employment Opportunity Themesoft Inc is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.Thanks &