Offensive Security Leader
Service Factory Solutions
/job-details/9388
We're looking for an Offensive Security Leader to lead and grow our Offensive Security team.
**What You'll Do**
- Lead red teaming, adversary emulation, penetration testing, and purple teaming engagements.
- Design realistic attack scenarios based on the threats most relevant to each client.
- Coordinate assessments across applications, APIs, infrastructure, cloud, networks, and identity systems.
- Take a hands-on role in the most complex technical engagements.
- Define scope, objectives, and rules of engagement together with clients.
- Translate findings into concrete risk assessments and recommendations.
- Ensure the quality of engagements and deliverables.
- Grow the team through mentoring and knowledge sharing.
- Present findings and recommendations to both technical and executive stakeholders.
**What We're Looking For**
- Solid experience in offensive security, red teaming, or penetration testing.
- Strong knowledge of attack techniques against applications, infrastructure, and identity systems.
- Experience with Windows, Linux, Active Directory, and cloud environments.
- Familiarity with MITRE ATT&CK, OWASP, and security testing methodologies.
- Ability to develop custom tools and automation.
- Strong client-facing skills, comfortable owning the technical relationship directly.
- Good command of both Italian and English.
**Nice to Have**
- Experience in social engineering, vulnerability research, exploit development, or detection engineering.
- Familiarity with Kubernetes, Docker, and DevSecOps practices.
- Exposure to TLPT frameworks.
- Relevant certifications in offensive security.
**How to Apply**
Interested candidates are invited to submit their CV to: careers@servicefactory.al
*\*Please note that only shortlisted candidates will be contacted for an interview.*
**What You'll Do**
- Lead red teaming, adversary emulation, penetration testing, and purple teaming engagements.
- Design realistic attack scenarios based on the threats most relevant to each client.
- Coordinate assessments across applications, APIs, infrastructure, cloud, networks, and identity systems.
- Take a hands-on role in the most complex technical engagements.
- Define scope, objectives, and rules of engagement together with clients.
- Translate findings into concrete risk assessments and recommendations.
- Ensure the quality of engagements and deliverables.
- Grow the team through mentoring and knowledge sharing.
- Present findings and recommendations to both technical and executive stakeholders.
**What We're Looking For**
- Solid experience in offensive security, red teaming, or penetration testing.
- Strong knowledge of attack techniques against applications, infrastructure, and identity systems.
- Experience with Windows, Linux, Active Directory, and cloud environments.
- Familiarity with MITRE ATT&CK, OWASP, and security testing methodologies.
- Ability to develop custom tools and automation.
- Strong client-facing skills, comfortable owning the technical relationship directly.
- Good command of both Italian and English.
**Nice to Have**
- Experience in social engineering, vulnerability research, exploit development, or detection engineering.
- Familiarity with Kubernetes, Docker, and DevSecOps practices.
- Exposure to TLPT frameworks.
- Relevant certifications in offensive security.
**How to Apply**
Interested candidates are invited to submit their CV to: careers@servicefactory.al
*\*Please note that only shortlisted candidates will be contacted for an interview.*
