Analista en Ofensiva

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Execute activities related to Ethical Hacking and Pentesting (internal, external, web, mobile, and network).

• Define methodologies, scopes, and timelines for security assessments.

• Analyze results, prioritize risks, and coordinate remediation plans with responsible departments.

• Ensure the appropriate use of scanning and offensive testing tools.

• Prepare executive and technical reports for senior management and clients as a result of Pentesting / EH exercises.

• Keep metrics, KPIs, and maturity levels in offensive security updated.

• Ensure compliance with regulations, standards, and best practices (ISO 27001, NIST, OWASP, MITRE).

• Develop and maintain operational procedures to ensure effectiveness in service delivery.

⛳️ Requirements

• Technical English proficiency to interpret specialized documentation.

• Availability to conduct authorized security tests and adhere to confidentiality agreements.

• Analytical skills, critical thinking, effective communication, and teamwork capabilities.

• Desirable certifications: CEH, eJPT, PNPT, OSCP, eWPTX, CPTS, CWES, CAPE, OSEP, OSWE, CRTP, CRTE, CRTO, CRTL, BSCP, and similar.

• Basic or intermediate knowledge of scripting and programming in Python, Bash, or PowerShell.

• Ability to create technical reports, document findings, and propose remediation plans.

• Knowledge in identifying, exploiting, and mitigating vulnerabilities.

• Proficiency in methodologies and standards such as OWASP Top 10, PTES, MITRE ATT&CK, and NIST.

• Familiarity with security testing for web applications, mobile apps, APIs, Active Directory, and infrastructure.

• Experience with pentesting tools such as Kali Linux, Nmap, Burp Suite, C2, and Wireshark.

• Strong understanding of networks, Linux and Windows operating systems, TCP/IP protocols, and server administration.

• 3 to 5 years of experience in ethical hacking, penetration testing, or cybersecurity.

• Professional or technologist degree in Systems Engineering, Computer Engineering, Cybersecurity, or related fields.

🏝️ Benefits

• Competitive salary and performance bonuses.

• Opportunities for professional development and training.

• Flexible working hours and remote work options.

• Health and wellness programs.

• Collaborative and inclusive work environment.