Senior Offensive Security Engineer – Azure, Entra ID

🔥 16 minutes ago

🌐 Indonesia, Mexico – Remote

🇮🇩 Indonesia – Remote 🇲🇽 Mexico – Remote

⏳ Contract/Temporary

🟠 Senior

☁️ Cloud Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Applaudo

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2013

💼 Consulting

📣 Marketing

📦 Logistics

Consulting • Marketing • Logistics

Applaudo is a nearshore software development company that helps businesses accelerate their digital transformation. With over a decade of experience, Applaudo partners with some of the world’s most admired brands to streamline IT solutions, optimize delivery costs, and modernize their digital infrastructure. The company offers a range of services including innovation and experience design, development and maintenance, quality assurance, cloud solutions, artificial intelligence, and cybersecurity. Applaudo is known for its expertise in data solutions and app modernization, and has a strong presence in industries like sports, media and entertainment, retail, consumer packaged goods, and financial services. Headquartered in Austin, TX with offices in San Salvador, Applaudo blends top-tier software development talent with cutting-edge technology to drive business growth for its clients.

📋 Description

• Lead identity and Azure boundary assumed-breach testing across two Azure tenants • Start from approved footholds and attempt privilege escalation through Entra ID roles, Azure RBAC, managed identities and service principals • Attempt movement between approved subscriptions and tenants and assess separation controls • Attempt to reach secrets, keys, tokens and nonpublic information in Key Vault, Storage and databases • Assess authorized AKS workloads, including workload identity abuse and pod-to-node escalation • Chain cloud findings with application-layer findings to demonstrate end-to-end attack paths • Prove privileged access through harmless read actions or approved reversible markers without changing tenant-wide settings • Report objectives as achieved or blocked with attack paths and supporting evidence; separate posture-only observations as untested • Remove created artifacts, including app registrations, role assignments and credentials, before testing ends • Retest remediated attack paths and contribute to the revalidation report • Escalate stop conditions within one hour and execute testing without service disruption or data loss • Explain complex attack paths to client cloud administrators and managed service providers

🎯 Requirements

• Bachelor’s Degree in Computer Science, Cybersecurity, Software Engineering, or a related field is desired, or equivalent professional experience • End-to-end penetration testing methodology covering reconnaissance, exploitation, privilege escalation, lateral movement and reporting • Offensive testing of Microsoft Entra ID, including directory roles, PIM, app registrations, consent grants and Conditional Access behavior • Azure RBAC privilege escalation and abuse of managed identities and service principals • Token theft and abuse involving access and refresh tokens, the IMDS managed identity endpoint, and Graph and ARM APIs • Hands-on experience with ROADtools, AzureHound/BloodHound, AADInternals, MicroBurst or GraphRunner • Attack path analysis across subscriptions and tenants, including B2B guests, multitenant apps and Azure Lighthouse • Active Directory and Windows privilege escalation and lateral movement • Working knowledge of the Microsoft Cloud Penetration Testing Rules of Engagement • CVSS v3.1 scoring and regulator-ready reporting supported by reproducible evidence • Ability to operate in a controlled and reversible way in production cloud environments • Precise, timestamped record keeping of every action • Strong spoken and written English (B2+) • Kubernetes and AKS offensive testing, hybrid identity attack paths, web application and API penetration testing, Defender for Cloud/CSPM output, and listed certifications are nice to haves

🏖️ Benefits

• Contract engagement for an initial period of 2 months, with possibility of extension • Remote work

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume