Description
An enterprise technology group is building a dedicated security validation team focused on vulnerability assessment and security testing across the group’s products and systems. The team runs structured testing campaigns: penetration testing, vulnerability discovery and triage, secure code review, and building automated test suites to make the process repeatable at scale.
The team also gets early access to specialized AI models and evaluates how they can accelerate security testing – an area we’re actively investing in, though the core of the work remains hands-on security engineering. Scope covers internal systems as well as business-unit products across the group, agreed campaign by campaign. The team starts small and scales into a permanent capability
Requirements
Must-Have skills
- Technical Exploitation: Advanced expertise in web application testing (OWASP Top 10), API security testing, internal/external network exploitation, and privilege escalation techniques.
- Cloud & Infrastructure: In-depth knowledge of securing and exploiting major cloud providers (AWS, Azure, or GCP) and modern containerized environments (Docker, Kubernetes).
- Scripting & Development: Experience with scripting programming languages; Python is preferred
- Tool Mastery: Advanced usage of security assessment tools (Burp Suite Pro, Metasploit, Cobalt Strike, Nmap, Wireshark, BloodHound, Impacket, etc.).
- Protocols: Strong knowledge of Network protocols (e.g., TLS, mTLS), as well as OT domain protocols (e.g., Modbus, TRDP). Good Understanding of well-known protocols (e.g., OIDC, OAuth2.0)
- Risk & Reporting: Strong ability to write comprehensive, high-quality assessment reports and clearly communicate technical risk to executives and business leaders.
Pen test planning: Experience in planning roadmaps for penetration tests and leading pen test teams
Requirements
- Experience: hands-on experience in penetration testing, vulnerability research, or red teaming, with demonstrated experience leading security projects or teams.
- Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
- Certifications (will be a plus): OSCP (Offensive Security Certified Professional) / OSWE / OSEP, GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), CISSP, or equivalent advanced security credential
Job responsibilities
Role Overview
We are seeking an expert Penetration Testing Engineer to drive our offensive security strategy and lead advanced security assessments across application, network, OT, and cloud environments. In this high-impact role, you will perform complex penetration tests, simulate sophisticated cyber threats (Red Teaming), and collaborate directly with engineering and product teams to remediate critical vulnerabilities.
Key Responsibilities
- Offensive Security Operations: Lead and execute end-to-end penetration testing across web applications, mobile platforms, cloud infrastructure (AWS/Azure/GCP), APIs, OT, and Networking
Red Teaming & Threat Simulation: Plan and execute adversary simulation exercises: Threat Modeling (Attack Tree, STRIDE, etc.) - Architecture & Code Review: Conduct secure code reviews and architectural security evaluations to identify logic flaws and design weaknesses early in the SDLC.
- Remediation & Collaboration: Partner with engineering, DevOps, and security teams to articulate risk severity and provide actionable, practical guidance for vulnerability remediation.
- Leadership & Mentorship: Guide, mentor, and elevate senior and junior engineers on the offensive security team; set quality standards for assessment scoping and report delivery.
- Tooling & Automation: Design, build, and maintain custom tools, scripts, and testing frameworks to enhance penetration testing efficiency.
- Executive Communication: Translate complex technical findings into clear, impactful executive summaries and risk reports for technical and non-technical stakeholders.
What we offer
Empowering Projects: With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting-edge technologies. As a team, we engineer digital products that positively impact people’s lives.
Empowering Growth: We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.
DE&I Matters: At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.
Career Development: Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.
Comprehensive Benefits: In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well-being of our consultants. We genuinely care about their health and strive to create a positive work environment.
Flexible Opportunities: At GlobalLogic, we prioritize work-life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.
About GlobalLogic
GlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world’s largest and most forward-thinking companies. Since 2000, we’ve been at the forefront of the digital revolution – helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.
