Offensive Security Specialist (m/f/d)

Cyber threats are evolving faster than ever, and organizations need offensive security experts who can stay one step ahead. As an Offensive Security Specialist, you will play a critical role in strengthening the cyber resilience of one of the world's leading global shipping and logistics companies.

You'll execute sophisticated penetration tests, simulate real-world attack scenarios, and uncover security weaknesses across modern enterprise environments. Your work will span traditional IT infrastructure, cloud platforms, identity ecosystems, web applications, APIs, operational technology (OT), and emerging AI-powered systems.

You will collaborate closely with security testing, threat intelligence, vulnerability management, and detection engineering teams to transform offensive findings into meaningful security improvements. If you're passionate about ethical hacking, enjoy solving complex technical challenges, and thrive in an environment where your expertise directly influences security strategy and risk reduction, we'd love to hear from you.

Execute penetration tests and red team engagements across infrastructure, cloud environments, applications, APIs, and operational technology systems

Simulate real-world attacker behaviors to identify exploitable attack paths and validate organizational resilience

Assess security controls across Active Directory, Entra ID, privileged access management solutions, and machine identities

Conduct web application, API, and cloud security assessments using leading offensive security methodologies

Perform ransomware, supply chain, and adversary simulation exercises to test detection, response, and recovery capabilities

Validate the real-world impact of vulnerabilities and support accurate risk prioritization through practical exploitation testing

Develop and maintain offensive security tooling, automation scripts, and testing infrastructure

Produce high-quality reports with actionable remediation recommendations and present findings to both technical and business stakeholders

Bachelor’s or Master’s degree in Cybersecurity, Information Technology, Computer Science, or a related field

Several years of hands-on experience in penetration testing, red teaming, or offensive security within complex enterprise environments

Strong expertise in network, identity, cloud, application, and API security testing

Solid experience with Active Directory, Entra ID, privilege escalation techniques, and identity-focused attack paths

Deep understanding of attacker tactics, techniques, and procedures (TTPs) and frameworks such as MITRE ATT&CK

Experience conducting security assessments of modern cloud platforms and hybrid environments

Strong scripting or development skills used to automate, customize, or enhance offensive security activities

Excellent analytical and communication skills, with the ability to translate complex technical findings into business-relevant insights

Professional certifications such as OSCP, OSEP, PNPT, CRTO, or comparable offensive security credentials are highly valued