Security Engineer – Offensive Security

About the role

Thrive is seeking a Security Engineer to join its Offensive Security team, delivering advanced vulnerability management and penetration testing services to clients. The role involves owning service delivery, ensuring client satisfaction, and staying current with industry best practices.

Key responsibilities

• Execute and analyze vulnerability scans, define remediation steps, and produce client reports.
• Conduct manual and automated penetration tests, write detailed findings, and present results to stakeholders.
• Lead client meetings, provide expert advice, and align remediation with business outcomes.
• Maintain documentation of security processes, generate automated reports, and update client security presentations.
• Stay abreast of emerging threats and attack techniques to inform clients.

Required profile

• Solid understanding of network protocols, operating systems, and application layer protocols.
• Experience with cybersecurity threats, incident response standards, and ability to communicate security concepts to non‑technical audiences.
• 3‑5 years of experience performing penetration tests, writing reports, and delivering debriefs.
• Strong analytical skills to process large data sets and solve complex problems.
• Excellent written and verbal communication skills and ability to work collaboratively in a team environment.

Required skills

• Vulnerability discovery and analysis tools.
• Penetration testing frameworks and tools such as BurpSuite, Metasploit, Caido.
• Knowledge of Windows and Linux/Unix system calls and APIs.
• Programming/scripting proficiency in Python.
• Certifications such as eJPT, PJPT, PenTest+, OSCP, GPEN, PNPT, CEH, Security+.