Red Team / Offensive Security Analyst | Hybrid - New York, NY | 6+ Months

Job Summary We are seeking security analyst who is responsible for simulating cyberattacks on systems, networks, and applications to identify vulnerabilities before malicious actors can exploit them. Key Responsibilities 1. Security Testing & Assessments • Conduct penetration testing on: o Web applications - o Network and infrastructure - o Desktops/Servers Linux and Windows - o APIs, cloud environments, and mobile apps • Perform vulnerability assessments using automated tools and manual techniques • Simulate real-world cyberattacks to evaluate system resilience 2. 2. Exploitation & Analysis a. Identify and exploit weaknesses in systems and applications b. Analyze security flaws, misconfigurations, and insecure code c. Test authentication systems, access controls, and network defenses d. Identify exploitable credentials and attack paths 3. Reporting & Documentation a. Document all findings, methodologies, and evidence of vulnerabilities b. Prepare detailed technical and executive reports c. Communicate risks and remediation recommendations to stakeholders 4. Remediation & Security Improvement a. Recommend solutions to address identified security gaps and vulnerabilities b. Work with development and infrastructure teams to implement fixes c. Validate remediation through re-testing and follow-ups 5. Tooling & Automation a. Use security tools such as: - Metasploit, Nmap, Burp Suite, Kali, Vulnerability Scanners, Pentera Console and Surface b. Develop scripts (Python, Bash) to automate testing processes c. Design custom exploits and testing methodologies 6. Continuous Learning & Threat Research a. Stay updated on: o Emerging threats b. Exploitation techniques c. Security vulnerabilities (OWASP, CVEs) d. Research new attack vectors and penetration testing techniques 7. Collaboration & Advisory a. Work with: i. Security teams ii. Developers iii. IT operations and/or Infrastructure Teams iv. Educate teams on secure coding and security best practices • Support compliance, audits, and risk assessments