Title: Senior Offensive Security Specialist

Location: Brussels, VLG

Contract Duration: Long Term

Work Mode: Onsite

About the Role

We are looking for a highly skilled Senior Offensive Security Specialist to strengthen our cybersecurity posture through advanced penetration testing, red teaming, and threat emulation. In this role, you will identify vulnerabilities, simulate adversary behaviors, support incident response, and collaborate closely with SOC teams to enhance defensive strategies.

Key Responsibilities

• Conduct penetration testing across on-prem, cloud (AWS/Azure/GCP), Windows, Linux, web applications, APIs, and network environments.
• Identify, exploit, and document vulnerabilities; deliver actionable remediation recommendations.
• Collaborate with the SOC team to improve cybersecurity use cases and support threat-hunting efforts.
• Provide offensive expertise during incident response to help contain and mitigate security incidents.
• Execute red team and adversary emulation exercises using tools such as MITRE Caldera, Atomic Red Team, Metasploit, Burp Suite, etc.
• Perform tactical simulations to test and enhance defensive capabilities.
• Conduct cloud penetration testing across AWS, Azure, and Google Cloud platforms.
• Prepare technical reports and executive summaries for key stakeholders.
• Maintain documentation of methodologies, tools, and findings to ensure consistent security testing practices.
• Stay updated on emerging threats, evolving attack techniques, and new offensive tools.
• Research, evaluate, and integrate new offensive security methods and technologies.
• Prioritize vulnerabilities based on risk and potential business impact.
• Provide mentorship, training, and workshops on offensive techniques and best practices.

Required Qualifications

• Bachelor’s degree in IT or a related field with 12+ years of relevant experience.
• Minimum 6 years of hands-on experience in penetration testing and cybersecurity.
• At least two certifications, including:
• One offensive (OSCP, CRTO, GPEN, GXPN, CCSP)
• One related to cybersecurity/IT/governance
• Demonstrated experience in penetration testing across on-prem, web, and cloud environments.
• Strong knowledge of:
• Network protocols & encryption
• Common attack vectors and techniques
• Hands-on expertise in:
• Active Directory Attacks
• C2 Frameworks
• Payload/Shellcode Development
• Binary Exploitation & Vulnerability Research
• Reverse Engineering & Debugging
• Fuzzing & Automated Vulnerability Discovery
• Network Recon & Attacks
• Adversary Emulation & Tactical Simulations
• Strong experience with Windows, Linux, AWS, Azure, and GCP.
• Proficiency in scripting (PowerShell, Python, Bash, etc.).
• Experience supporting SOC and incident response teams.
• Excellent English communication skills (C1 level).