Senior Offensive Security Engineer

This is a fully remote position, open to applicants in Europe.

📋 Description

• Assess and enhance the security posture of Atari's IT infrastructure, applications, and networks.

• Conduct thorough vulnerability assessments on both internal and external systems, networks, and applications.

• Utilize automated tools and manual methods to uncover security vulnerabilities.

• Carry out penetration tests on IT infrastructure, web applications, mobile platforms, and network components.

• Simulate cyber-attacks to test the effectiveness of current security measures.

• Implement AI-driven security tools and AI/ML security considerations for detection, analysis, and fortification.

• Design, execute, and uphold secure configuration baselines for both cloud and on-premise environments.

• Conduct configuration reviews of security tools and platforms, identify misconfigurations, and ensure remediation is completed.

• Support incident response by performing root cause analysis and managing incident containment.

• Analyze assessment and testing outcomes to pinpoint vulnerabilities and risks.

• Create detailed reports with actionable remediation suggestions.

• Present findings to both technical and non-technical stakeholders.

• Work in collaboration with security, development, and operations teams to prioritize and address vulnerabilities.

• Assist in the implementation of security controls and solutions.

• Develop and maintain documentation regarding assessments, findings, and remediation efforts.

• Stay informed about emerging cybersecurity threats, vulnerabilities, and industry best practices.

• Travel across the country may be necessary for projects, monitoring, assessments, testing, and coordination with distributed teams.

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

• 3+ years of relevant experience in vulnerability assessment and penetration testing (VAPT) or cybersecurity roles.

• Strong comprehension of network protocols, operating systems, and web technologies.

• Proficient in security testing tools such as Nessus, Nmap, Burp Suite, Metasploit, and similar platforms.

• In-depth understanding of IT security standards and frameworks like OWASP, NIST, and SANS Top 25.

• Familiarity with the OSI model, TCP/IP model, and essential networking concepts.

• Practical experience in manual penetration testing and security assessments.

• Experience with IoT/OT security is a plus.

• Solid understanding of embedded protocols such as UART, I2C, SPI, JTAG, and SWD.

• Experience with radio protocol attacks involving BLE, Wi-Fi, LoRa, DSP, and SDR.

• CEH, OSCP, or equivalent certifications are preferred.

• Experience with Hack The Box or Capture The Flag exercises is preferred.

• Proficiency in Python, Bash, or PowerShell is preferred.

• Experience in Vendor Risk Assessments or IT Governance processes is preferred.

• Hands-on experience with both commercial and open-source tools/frameworks including Burp Suite, Metasploit, Core Impact, Scapy, AppScan, WebInspect, Qualys, Nessus, Nmap, SQLmap, and OWASP ZAP.

• Resume, cover letter, and a link to GitHub, portfolio, or relevant projects are required for application.

🏝️ Benefits

• Equal employment opportunity with a workplace free from harassment and discrimination.

• Opportunity to collaborate with globally recognized gaming brands and international teams.