Only w2- Red Team / Offensive Security Analyst

Red Team / Offensive Security Analyst

Hybrid – New York, NY

Only W2 (No C2C)

Job Description / Responsibilities

Responsible for simulating cyberattacks on systems, networks, and applications to identify vulnerabilities before malicious actors can exploit them.

Security Testing & Assessments

• Conduct penetration testing on:

– Web applications

– Network and infrastructure

– Desktops/Servers Linux and Windows

– APIs, cloud environments, and mobile apps

• Perform vulnerability assessments using automated tools and manual techniques
• Simulate real-world cyberattacks to evaluate system resilience

Exploitation & Analysis

• Identify and exploit weaknesses in systems and applications
• Analyze security flaws, misconfigurations, and insecure code
• Test authentication systems, access controls, and network defenses
• Identify exploitable credentials and attack paths

Reporting & Documentation

• Document all findings, methodologies, and evidence of vulnerabilities
• Prepare detailed technical and executive reports
• Communicate risks and remediation recommendations to stakeholders

Remediation & Security Improvement

• Recommend solutions to address identified security gaps and vulnerabilities
• Work with development and infrastructure teams to implement fixes
• Validate remediation through re-testing and follow-ups

Tooling & Automation

• Use security tools such as:

– Metasploit, Nmap, Burp Suite, Kali, Vulnerability Scanners, Pentera Console and Surface

• Develop scripts (Python, Bash) to automate testing processes
• Design custom exploits and testing methodologies

Continuous Learning & Threat Research

• Stay updated on:

– Emerging threats

– Exploitation techniques

– Security vulnerabilities (OWASP, CVEs)

• Research new attack vectors and penetration testing techniques

Collaboration & Advisory

• Work with:

– Security teams

– Developers

– IT operations and/or Infrastructure Teams

• Educate teams on secure coding and security best practices
• Support compliance, audits, and risk assessments