Offensive Security Specialist

About the role

Etiya is seeking an Offensive Security Specialist to lead security assessments across web applications, APIs, enterprise infrastructure, Kubernetes environments, and AI/LLM‑based systems. The role involves hands‑on penetration testing, code review, and collaboration with development and infrastructure teams to remediate findings.

Key responsibilities

• Plan and execute manual penetration tests within defined scopes and rules of engagement.
• Assess Kubernetes clusters and containerized workloads for misconfigurations and privilege‑escalation paths.
• Test AI/LLM applications for prompt injection, data disclosure, model abuse and unauthorized tool use.
• Perform security‑focused source code reviews and static application security testing (SAST).
• Develop controlled proof‑of‑concept demonstrations and produce clear, actionable security reports.

Required profile

• BS or MS in Computer Engineering, Cyber Security or related field, or equivalent practical experience.
• Minimum 2 years of professional offensive security experience, including web, API and enterprise infrastructure testing.
• Strong understanding of security vulnerabilities, attack techniques and penetration testing methodologies.
• Excellent written and spoken English with the ability to communicate technical findings.

Required skills

• Penetration testing of web applications, APIs and enterprise infrastructure.
• Kubernetes and container security testing (RBAC, service accounts, secrets management).
• AI/LLM security testing (prompt injection, model abuse).
• Proficiency with Burp Suite, Nmap and other exploitation tools.
• Scripting in Python, Bash or PowerShell for automation.
• CVE analysis, vulnerability reproduction and proof‑of‑concept development.
• Static Application Security Testing (SAST) and manual code review.