Specialist - Offensive Security

About the role

PureCS is looking for an Offensive Security Specialist to strengthen the security of its national‑scale digital health platforms. The role involves performing penetration testing, adversarial simulations, and advanced security assessments across PureCS and PureNet systems while collaborating with DevSecOps, Cloud, Architecture, and Product teams.

Key responsibilities

• Execute periodic network, infrastructure, cloud, and application penetration tests (black‑box, grey‑box, white‑box).
• Conduct internal and external testing of AD/EntraID, servers, endpoints, and hyperscaler environments.
• Perform web, mobile, thick‑client, and API testing with follow‑up remediation.
• Carry out controlled post‑exploitation, privilege escalation, and lateral movement to demonstrate business impact.
• Collaborate with development teams to test incremental changes, review SAST/DAST/SCA outputs, and drive tooling integration.
• Map findings to OWASP Top 10, MITRE ATT&CK, and CVSS, validate automation outputs, and retest remediated issues.
• Support red and purple team exercises and contribute to offensive tooling automation.

Required profile

• Minimum 3 years hands‑on offensive security/penetration testing experience.
• At least 6 years total IT experience.
• Strong knowledge of AD attack paths, privilege escalation, lateral movement, and exploitation techniques.
• Proficiency in manual testing of web, mobile (iOS/Android), API, and thick‑client applications.

Required skills

• Penetration testing
• AD attack paths
• Privilege escalation
• Lateral movement
• Exploitation techniques
• Web application testing
• Mobile application testing (iOS, Android)
• API testing
• Thick‑client testing
• Windows and Linux OS internals
• Network protocols
• Authentication/authorization mechanisms
• Burp Suite
• Nmap
• Metasploit
• BloodHound
• Impacket
• C2 frameworks
• Python scripting
• PowerShell scripting
• SAST, DAST, SCA tools
• OWASP Top 10
• MITRE ATT&CK
• CVSS scoring