Security Engineer – Offensive Security (1–3 YOE)

Company Overview

We are supporting an opportunity with a leading Asia-based financial services organization with a strong presence across global markets. The company operates in a high-performance, regulated environment supporting critical trading and enterprise platforms.

Role Summary

We are seeking a Security Engineer with 1-3 years of experience in offensive security, red teaming, or penetration testing. The role focuses on identifying vulnerabilities, simulating real-world attacks, and strengthening security controls across applications, infrastructure, and networks.

Key Responsibilities

• Conduct penetration testing across web applications, APIs, networks, and internal systems
• Perform vulnerability assessments and provide clear remediation recommendations
• Support red team engagements and simulated attack scenarios
• Identify security weaknesses across cloud and on-prem environments
• Collaborate with engineering and infrastructure teams to improve security posture
• Document findings, risk ratings, and mitigation steps
• Assist in incident response and security investigations when required
• Stay updated with emerging attack techniques, tools, and threat intelligence

Requirements

• 1-3 years of experience in offensive security, penetration testing, or red team operations
• Strong understanding of OWASP Top 10 and common exploitation techniques
• Hands-on experience with tools such as Burp Suite, Nmap, Metasploit, Wireshark, etc.
• Good understanding of Linux systems and scripting (Python, Bash, or similar)
• Knowledge of networking fundamentals and system architecture
• Exposure to cloud platforms (AWS, Azure, or GCP) is a plus
• Relevant certifications (CEH, OSCP, eJPT) are an advantage but not mandatory
• Strong analytical, problem-solving, and communication skills