Offensive Security Engineer

Job not on LinkedIn

🔥 8 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sporty Group

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2013

📱 Media

🎮 Gaming

🎲 Gambling

Media • Gaming • Gambling

Sporty Group is a global sports, technology and entertainment company that builds large-scale products including live sports experiences, streaming media, interactive gaming, and integrated sports betting platforms. The group operates remote-first across multiple continents with flagship offerings such as SportyTV (a free live sports and entertainment streaming platform), Sporty. com (sports app with news, scores, streams, and odds), Sporty Studios (video and content production), and Sporty Interactive (video games and SportyBet sportsbook). Sporty focuses on user experience, technology-driven innovation, and scaling digital products for millions of users worldwide.

📋 Description

• Monitor, map, and test Sporty’s entire external attack surface, including all Sporty Group external domains, subdomains, websites, and public IP addresses. • Conduct adversary emulation exercises against internal and office endpoints to validate the effectiveness of EDR, XDR, and SOC monitoring platforms. • Evaluate the security posture of physical office hardware, corporate network equipment, and internal edge infrastructure. • Perform scoped offensive testing on external-facing web applications and limited, public-facing API endpoints. • Translate external discovery, DNS security posture, network access control weaknesses, and EDR emulation findings into repeatable defensive checks. • Support our Purple Team validate that EDR policies, perimeter controls, firewall rules, and network segmentation work as expected. • Document multi-stage network or system exploitation chains to provide practical, reproducible remediation blueprints for infrastructure and SOC teams. • Support IT and Network analysts with clear vulnerability descriptions, triage steps, severity logic, and escalation guidance. • Improve external asset tracking, perimeter health records, and exposure trend mapping. • Track external vulnerability gaps, emulation success rates, remediation times, asset health, and perimeter exposure.

🎯 Requirements

• Experience in offensive security, perimeter penetration testing, network security assessments, or adversary emulation. • Strong understanding of external asset discovery, DNS configuration vulnerabilities, and public IP network routing. • Practical experience auditing and testing Linux and Windows environments and underlying network services. • Ability to perform adversary emulation and bypass techniques against modern EDR/XDR solutions. • Familiarity with testing physical office network hardware, routers, switches, firewalls, and workplace IT systems. • Ability to turn external exposures and technical network risks into clear, actionable fixes for IT and Security teams. • Experience with core web vulnerabilities and limited, scoped testing of modern API interfaces. • Strong scripting ability in Python, PowerShell, Bash, or similar to automate perimeter mapping, emulation workflows, and asset discovery. • Good understanding of scanning, reconnaissance, and interception tools. • Strong documentation skills.

🏖️ Benefits

• A competitive salary plus individual performance-based bonuses every quarter • 28 days paid annual leave • Core working hours of 10am-3pm in your local time zone, with flexibility outside of these hours • Referral bonuses and flash bonuses • Top-of-the-line equipment • Annual company retreats that provide opportunities to connect and collaborate with colleagues from around the world