Senior Adversarial Engineer
Sofia, Sofia-Capital, Bulgaria
Full Time
5 hours ago
Key skills
AWSAzureCloudPythonBashPowerShellIAMOAuthJWTActive DirectoryPenetration TestingNetwork SecurityCloud Security
About this role
Role Overview
- Perform advanced web & API exploitation beyond automated tools
- Execute internal / Active Directory attacks and lateral movement scenarios
- Lead infrastructure & enterprise security assessments (ISSAF-aligned)
- Conduct cloud security testing across Azure & AWS environments
- Support and evolve offensive security capabilities, tooling, and training
- Lead engagements, workshops, and present findings to stakeholders
Requirements
- Strong experience in Offensive Security / Penetration Testing / Red Teaming
- Deep expertise in: Web/API attacks (SSRF, IDOR/BOLA, OAuth/OIDC/JWT, deserialization, RCE)
- Active Directory attacks (Kerberoasting, ADCS abuse, NTLM relay, delegation attacks)
- Cloud security (AWS/Azure) – IAM escalation, misconfig exploitation, Managed Identities
- Proven ability to lead end-to-end engagements (scoping, execution, delivery)
- Hands-on experience with tools: Burp Suite Pro, Nmap, Impacket, BloodHound, CrackMapExec
- Strong scripting skills: Python / PowerShell / Bash
- Solid understanding of enterprise security assessments & network security
- Certifications such as OSCP / CPTS (or equivalent)
- Strong reporting skills with clear business impact & remediation guidance
- Experience working under compliance frameworks (ISO 27001, PCI DSS, etc.)
- Fluent English and basic German.
Tech Stack
- AWS
- Azure
- Cloud
- Python
Benefits
- Work with top-tier talent in a collaborative, high-performing team
- Grow through cutting-edge technologies, continuous learning, and certification opportunities
- Thrive in a global, diverse culture while contributing to exciting, cross-industry projects
- Enjoy 50+ tailored benefits and a flexible hybrid working model
- Balance work and life in a culture that supports your personal and professional development