Offensive Security Engineer

The Offensive Security Engineer owns security testing, perimeter monitoring, and reconnaissance across all external domains, websites, IP blocks, and DNS configurations for Sporty Group. The role involves working closely with IT, Network Engineering, SOC, and Security teams to improve perimeter defenses through external discovery, adversary emulation, and exploitation insights.

Location: United States

Responsibilities

• Monitor, map, and test Sporty’s entire external attack surface, including all external domains, subdomains, websites, and public IP addresses.
• Conduct adversary emulation exercises against internal and office endpoints to validate the effectiveness of EDR, XDR, and SOC monitoring platforms.

Requirements

• Experience in offensive security, perimeter penetration testing, network security assessments, or adversary emulation.
• Strong understanding of external asset discovery, DNS configuration vulnerabilities, and public IP network routing.
• Practical experience auditing and testing Linux and Windows environments and underlying network services.
• Ability to perform adversary emulation and bypass techniques against modern EDR/XDR solutions.
• Familiarity with testing physical office network hardware, routers, switches, firewalls, and workplace IT systems.
• Strong scripting ability in Python, PowerShell, Bash, or similar to automate perimeter mapping, emulation workflows, and asset discovery.
• Good understanding of scanning, reconnaissance, and interception tools.
• Strong documentation skills.

Benefits

• Competitive salary
• Individual performance-based bonuses every quarter
• 28 days paid annual leave
• Core working hours of 10am-3pm in your local time zone, with flexibility outside of these hours
• Referral bonuses and flash bonuses
• Top-of-the-line equipment
• Annual company retreats

Additional Information

• Originally posted on Himalayas