Offensive Security Specialist

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Juicyway

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2021

💳 Fintech

🏦 Banking

🛍️ eCommerce

Fintech • Banking • eCommerce

Juicyway is a comprehensive money platform designed for businesses of all sizes, offering seamless cross-border payment solutions, multicurrency accounts, and advanced payment processing capabilities. With features such as real-time currency exchange, crypto management, and a strong API for integrations, Juicyway enables businesses to efficiently manage local and international transactions, ensuring secure and flexible financial operations. The platform prioritizes user experience, providing low transaction fees and a robust fraud protection system, making it a reliable choice for global financial management.

📋 Description

• Conduct application security testing (Threat modelling, SCA, SAST, DAST) across web, mobile, and API platforms to identify vulnerabilities such as those in the OWASP Top 10 • Perform vulnerability assessments across internal and external networks, systems, and cloud infrastructure • Execute penetration tests (black-box, gray-box, and white-box) against cloud environments (AWS, Azure, GCP), including IAM misconfigurations, storage exposure, container security, and serverless architectures • Simulate real-world attack scenarios, including red team exercises, social engineering, and adversary emulation • Analyze and validate findings from automated scanning tools to eliminate false positives • Develop custom scripts, tools, or exploits to test specific attack vectors as needed • Document findings in detailed technical reports with clear risk ratings, business impact, and remediation recommendations • Present findings to technical teams and leadership in a clear, actionable manner • Collaborate with engineering and DevOps teams to support secure coding practices and remediation efforts • Stay current with emerging threats, attack techniques, CVEs, and cloud security research • Contribute to the development of internal security testing methodologies, playbooks, and tooling • Support compliance efforts (e.g., PCI-DSS, SOC 2, ISO 27001) through testing evidence and reporting

🎯 Requirements

• 4+ years of experience in penetration testing, red teaming, or offensive security roles • Strong understanding of web application security (OWASP Top 10, API security, authentication/authorization flaws) • Hands-on experience with cloud security testing across AWS, Azure, and/or GCP • Proficiency with common offensive security tools (e.g., Burp Suite, Metasploit, Nmap, Nessus, Cobalt Strike) • Scripting/programming skills (Python, Bash, PowerShell, or similar) for tool development and automation • Solid understanding of networking, operating systems (Linux/Windows), and containerization (Docker/Kubernetes) • Experience with vulnerability management and reporting tools • Strong written and verbal communication skills, with the ability to translate technical findings for non-technical audiences.

🏖️ Benefits

• Competitive pay • Meaningful equity at an early stage • Real flexibility on hours, location, and how you do your best work • A technical team that takes security seriously and will actually listen to you