Red Team Offensive Security Analyst

Red Team / Offensive Security Analyst

Location: Hybrid, New York, NY
Employment: W2 only (no C2C). Background verification must be cleared before start.

About the role
We're looking for an experienced offensive security professional to simulate real-world attacks on systems, networks, and applications and find vulnerabilities before attackers do. You'll test, exploit, report, and then work with engineering teams to fix and re-test.

What you'll do

• Run penetration tests on web apps, networks and infrastructure, Linux/Windows servers and desktops, APIs, cloud environments, and mobile apps
• Perform vulnerability assessments using automated tools and manual techniques
• Identify and exploit weaknesses, misconfigurations, insecure code, exploitable credentials, and attack paths
• Test authentication, access controls, and network defenses
• Write technical and executive reports with findings, evidence, and remediation advice
• Work with developers and infrastructure teams on fixes, then validate through re-testing
• Build scripts (Python, Bash), custom exploits, and testing methods to automate your work
• Track emerging threats, CVEs, and OWASP guidance, and support audits and risk assessments

Must have

• 14+ years of experience, with deep hands-on penetration testing
• Metasploit, Nmap, Burp Suite, Kali, OWASP-ZAP, and vulnerability scanners
• Strong web application, network, and API testing skills
• Experience with web application firewalls
• Python and/or Bash scripting
• Strong written reporting skills for technical and executive audiences

Nice to have

• Pentera (Console and Surface)
• Cloud and mobile application testing depth

Dice skills tags: Penetration Testing, Red Team, Offensive Security, Metasploit, Burp Suite, Kali Linux, Nmap, OWASP, OWASP-ZAP, Vulnerability Assessment, Web Application Security, API Security, Python, Bash, Pentera

eye