FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Senior Digital Security Specialist – Offensive and Defensive Security
Sinqia. Plan and execute black-box, gray-box, and white-box penetration tests on web applications, APIs, networks, servers, and cloud environments, with formal scope and authorization .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in penetration testing, vulnerability assessments, and security-focused code reviews across web applications, APIs, networks, and cloud environments. Proficient in risk prioritization using CVSS and OWASP methodologies, with strong technical writing and communication skills.
Highest-signal resume keywords
Penetration TestingAWS SecurityOWASP Top 10Burp SuitePython Automation
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Penetration TestingVulnerability AssessmentSecurity Code ReviewRisk PrioritizationNetworking KnowledgeLinux Operating SystemWindows Operating SystemActive DirectoryCryptographyThreat Modeling
Soft Skills
Technical WritingCommunication Skills
Tools & Technologies
Burp SuiteNmapMetasploitCI/CD PipelinesEnumeration ToolsPost-Exploitation Tools
Certifications & Qualifications
OSCPOSEPOSWEGPENGWAPTCISSPAWS Certified Security – SpecialtyMicrosoft AZ-500Google Professional Cloud Security EngineerOracle Cloud Infrastructure Security Professional
Industry Keywords
Black-Box TestingGray-Box TestingWhite-Box TestingVulnerability ExploitationPrivilege EscalationLateral MovementVulnerability ChainingCVEsMITRE ATT&CKBug Bounty Programs
Tech Stack
Tools & technologiesAWSAzureCloudGoogle Cloud PlatformLinuxOraclePython
About the role
Key responsibilities & impact- Plan and execute black-box, gray-box, and white-box penetration tests on web applications, APIs, networks, servers, and cloud environments, with formal scope and authorization
- Simulate real-world attacks, including vulnerability exploitation, privilege escalation, lateral movement, and vulnerability chaining
- Conduct vulnerability assessments and review insecure configurations, manually validating automated findings
- Perform security-focused code reviews when necessary
- Stay up to date on attack techniques, CVEs, and threat trends
- Propose technical fixes and identify root causes
- Recommend improvements to architecture, hardening, configuration best practices, and compensating controls
- Prioritize risks based on severity and impact using CVSS, OWASP, and MITRE ATT&CK
- Support development, infrastructure, and cloud teams in implementing fixes and revalidate the results
- Contribute to secure development processes and vulnerability management
- Prepare technical reports and executive summaries with evidence, reproduction steps, risk ratings, and remediation plans
- Present findings and recommendations to technical and non-technical audiences
- Read and produce technical documentation in English
Requirements
What you’ll need- Proven experience in penetration testing and offensive security across multiple domains (web/API, infrastructure, networks, and cloud)
- Experience securing AWS environments
- Strong knowledge of OWASP Top 10, OWASP ASVS, PTES, MITRE ATT&CK, and CVSS
- Solid knowledge of networking, Linux and Windows operating systems, Active Directory, authentication, and cryptography
- Experience with Burp Suite, Nmap, Metasploit, and enumeration and post-exploitation tools
- Ability to automate tasks and develop custom tools or scripts using Python or Bash
- Experience proposing and guiding the implementation of fixes and hardening measures
- Strong technical writing and excellent communication skills
- Technical proficiency in English
- Preferred: experience with Azure, GCP, and/or OCI
- Preferred: certifications such as OSCP, OSEP, OSWE, GPEN, GWAPT, CISSP, AWS Certified Security – Specialty, Microsoft AZ-500, Google Professional Cloud Security Engineer, Oracle Cloud Infrastructure Security Professional, or CCSP
- Preferred: participation in Bug Bounty programs, CTFs, or responsible vulnerability disclosure (published CVEs)
- Preferred: experience with Threat Modeling and security in CI/CD pipelines (DevSecOps)
Benefits
Comp & perks- Remote work
- Individual contributor role