Offensive Security Consultant

About the role

Osol is looking for an Offensive Security Consultant to build its offensive security practice from the ground up. The role delivers high-end penetration testing and red team engagements for internal operations and for external enterprise and industrial clients, covering cloud infrastructure, AI/ML platforms and IT/OT environments in manufacturing and energy. It is a builder-level position: setting up the toolchain, playbooks and standards, not only delivering engagements.

Key responsibilities

• Execute web, network, mobile and cloud penetration tests and red team engagements internally and externally
• Perform secure code reviews and SAST/DAST application security reviews
• Extend offensive testing to OT/ICS environments in manufacturing, energy and logistics
• Conduct adversarial testing of AI/ML systems, APIs and cloud environments
• Support pre-sales by scoping, pricing and presenting engagements
• Partner with engineering teams to remediate findings and harden systems
• Select and stand up the core offensive security toolchain (Burp Suite, Metasploit, Cobalt Strike, Nmap, Wireshark)
• Build delivery playbooks, rules-of-engagement templates and reporting formats
• Validate detection coverage of EDR and cloud security platforms during red team exercises
• Define quality standards and reporting templates, represent the company in client pitches, contribute case studies and mentor junior hires

Required profile

• Master's degree in Cybersecurity, Information Security, Computer Science, Information Technology or a related field
• 5-7 years of experience in offensive security (penetration testing and/or red teaming)
• Client-facing consulting experience delivering security engagements to enterprise clients
• Experience producing client-ready technical and executive reports, and experience scoping or selling security engagements
• Exposure to offensive testing of OT/ICS environments

Required skills

• Hands-on use of Burp Suite, Metasploit, Cobalt Strike, Nmap and Wireshark
• Hands-on experience with at least one major cloud provider (AWS, Azure or GCP)
• Application security: secure SDLC, SAST/DAST and API security; familiarity with AI/LLM testing such as prompt injection
• OSCP certification or equivalent practical certifications
• Strong stakeholder communication in English with international clients