OffSec Consultant

Offensive Security (OffSec) Consultant

Location: Remote

About VerSprite:

VerSprite is a leader in offensive security and risk-based threat modeling. We help organizations improve their security posture by simulating real-world attacks, conducting thorough threat analysis, and embedding security into every stage of development. Our unique approach blends cybersecurity and business impact assessment to deliver tailored solutions that reduce risk and enhance overall security.

Position Overview:

We are seeking an experienced OffSec Consultant to join our Adversarial Security team. As part of our Offensive Security Services, you will work with clients to simulate cyberattacks, identify vulnerabilities, and provide actionable insights. You will play a critical role in helping organizations understand and mitigate the real risks their systems face from advanced attackers. 

Key Responsibilities:

• Conduct manual penetration testing on web applications, networks, and embedded systems.
• Use threat modeling methodologies, like PASTA (Process for Attack Simulation and Threat Analysis), to evaluate risks and assess the potential impact of real-world attacks.
• Design and execute red teaming exercises that emulate cybercriminal tactics.
• Analyze vulnerabilities using both automated tools and custom techniques for deep threat analysis.
• Collaborate with DevOps and security teams to integrate OffSec practices into the SDLC (Software Development Life Cycle).
• Provide comprehensive security assessments, including CREST accredited penetration testing.
• Develop reports that explain findings, contextualize risks, and propose practical remediation strategies.

Qualifications:

• Proven experience in penetration testing, ethical hacking, or offensive security consulting.
• Familiarity with threat modeling frameworks, such as PASTA.
• Strong understanding of network security, web application vulnerabilities, and cloud security best practices.
• Ability to script and develop custom testing tools for security assessments.
• CREST, OSCP, or similar security certifications are preferred.
• Excellent communication skills to present complex security findings to technical and nontechnical audiences.

Why Join VerSprite?
At VerSprite, we prioritize continuous learning and innovation. You’ll have the opportunity to work alongside some of the best minds in the cybersecurity industry while contributing to cutting edge security solutions for clients across a variety of sectors.