Offensive Security Engineer

🛡️ Offensive Security Engineer

Locations: Colombo

About the Role

Axiata Digital Labs is hiring a contract Offensive Security Engineer to evaluate digital postures and safeguard applications and networks against vulnerabilities.

What You Will Do

• Conduct manual penetration testing on web applications, mobile platforms, APIs, and networks to discover and exploit security gaps
• Document vulnerabilities, business impact, and remediation recommendations systematically and communicate findings to service owners
• Perform regular vulnerability assessments and penetration testing while evaluating internet exposure across operating companies
• Take ownership of complex security challenges, liaise with internal stakeholders, and drive solutions through to completion

What You Need

• Minimum of 2 years of experience executing vulnerability assessments and penetration testing across web, mobile, network, and API applications
• Strong knowledge of OWASP Top 10 vulnerabilities, mitigations, networking fundamentals, OSI layers, and TCP/IP protocols
• Hands-on experience with GNU/Linux penetration testing operating systems like Kali Linux, automation scripting, and at least one programming language
• Familiarity with tools such as Burp Suite, Nuclei, Frida, and Nessus, backed by good spoken and written English skills
• Preferred qualifications include security certifications like OSCP, OSWE, CRTP, or GIAC, cloud and Windows penetration testing knowledge, CVE publications, bug bounty records, and development background

Work Arrangement

• Contract role based on-site in Colombo

How to Apply

Apply through the organisation's careers page via the Apply button.

Contact Information

• Apply: https://www.careers-page.com/axonect/job/3W396778