Offensive Service Lead (Senior Pentester)

About the job
Job Summary: 
We are looking for an experienced Offensive Service Lead (Senior Pentester) with a strong management and client-facing background to lead a team and deliver complex security services. You’ll manage penetration testing engagements, guide a team of Pentesters, and ensure high-quality technical delivery to clients. If you have 8+ years of experience in offensive security and a proven track record of managing teams and client relationships, this is the role for you!

Key Responsibilities: 
Lead and manage Pentesting teams, ensuring quality and timely delivery of security assessments. 
Act as the primary point of contact for clients, communicating technical findings and strategies to both technical and non-technical stakeholders. 
Oversee offensive security engagements including penetration testing, red teaming, and vulnerability assessments. 
Guide and mentor team members while maintaining a hands-on role in testing and research. 
Stay on top of the latest security threats and ensure the team is aligned with industry’s best practices.

Education 
Master’s degree in Information Security, Computer Engineering, Computer Technology Information Systems preferred. 
Bachelor’s degree in Computer Engineering, Computer Technology, or similar discipline preferred.

Required Experience: 
8+ years of cybersecurity experience with 5+ years in a leadership role. 
Extensive client-facing experience, managing complex security projects. 
In-depth knowledge of penetration testing, red teaming, web and mobile application security, and code review. 
Experience with scripting / programming skills (e.g., Python, PowerShell, Java, Perl etc). 
1-3 years of experience in one of the following: Network operations or engineering or system administration on Unix, Linux, Windows preferred.
Having detailed knowledge of Application Security tools, technologies, and best practices. 
Understanding of common cloud technologies and devOps processes in AWS, GCP, Azure, Docker, Kubernetes, Terraform, etc. 
Experience with frameworks like MITRE ATT&CK and Cyber Kill Chain.

Certifications: 
OSCP, OSWP, eCPPT, eWPT, PNPT or similar.