CoreHRx Jobs

Apply in one click, save jobs and take free mock tests.

Register free Log in
Hiring? Post jobs with CoreHRx
My account
user

View & update profile

Senior Offensive Security Engineer

First Advantage Global Operating Center (GOC)

Full time
Experience
5+ years
Location
India
Work mode
Not stated
Salary
₹11L – ₹25L a year estimatetypical for IT Jobs in India, 825 posts
Posted 2 days ago Last checked 40 min ago

Free · takes a minute · your resume fills your profile

CoreHRx never asks candidates for money. If anyone does, .

Role at a glance

You will
  • In this hands-on role, you will think and operate like an adversary — continuously finding, exploiting, and helping remediate real-world…
  • You will design and execute penetration tests, red and purple team engagements, and adversary emulation exercises that validate our…
  • This role partners closely with Security Operations, Threat Intelligence & Hunt, Vulnerability Management, Application Security, DevOps…
Experience
5+ years
Must-have skills
AWSBash ScriptingKubernetesLinuxMicrosoft AzurePenetration Testing

How well do your skills match this job?

Sign in to see your fit: the skills, experience and location this job asks for, checked against your profile.

Job description

Location: IN_Bangalore_Virtual, India

**What You'll Do**

We are seeking a highly skilled and motivated Senior Offensive Security Engineer to join our Threat Management & Security Operations organization. In this hands-on role, you will think and operate like an adversary — continuously finding, exploiting, and helping remediate real-world weaknesses across First Advantage’s products, cloud infrastructure, networks, and people. You will design and execute penetration tests, red and purple team engagements, and adversary emulation exercises that validate our detection and response capabilities and measurably reduce enterprise risk at-scale.

This role partners closely with Security Operations, Threat Intelligence & Hunt, Vulnerability Management, Application Security, DevOps, and Product teams to turn offensive findings into prioritized, business-aligned remediation. The ideal candidate is equally comfortable building custom tooling, chaining exploits across complex environments, and communicating impact clearly to both technical teams and executive leadership.

**Responsibilities**

  • **Penetration Testing:** Plan, scope, and execute internal and external penetration tests across web and mobile applications, APIs, cloud (AWS/Azure), networks, and infrastructure using real-world attacker techniques.
  • **Red & Purple Teaming:** Design and run adversary emulation and red team engagements that combine multiple attack paths to accomplish objective-based goals, and partner with the SOC, Threat Intel & Hunt, and Detection Engineering on purple team exercises to validate and improve detection coverage.
  • **Exploit Development & Chaining:** Identify, validate, and safely exploit vulnerabilities — including chaining lower-severity issues into high-impact attack paths — and demonstrate tangible business impact in production-representative environments.
  • **Adversary Emulation:** Model real-world threat actor tactics, techniques, and procedures (TTPs) mapped to the MITRE ATT&CK framework to test and strengthen organizational resilience, detection, and response.
  • **Findings & Remediation:** Review and validate findings for accuracy, prioritize real-world exploitability and business risk, create remediation tickets, and partner with engineering teams to drive fixes and coordinate retests within policy SLAs.
  • **Tooling & Automation:** Build and maintain custom scripts, tooling, and automation to scale offensive testing, and help operationalize continuous/autonomous testing platforms across the environment.
  • **Reporting & Communication:** Produce clear, decision-ready reports and executive summaries that translate technical findings into risk and business impact for technical stakeholders, GRC/Audit, and executive leadership.
  • **Incident Response Support:** Support incident response and threat hunting efforts by providing offensive expertise, attack-path context, and adversary insight.
  • **Continuous Improvement:** Contribute to the maturity of the offensive security program — developing repeatable methodologies, playbooks, and metrics that demonstrate progress over time.

**What You Will Need to be Successful:**

  • 5+ years of hands-on experience in offensive security, penetration testing, red teaming, or a closely related security engineering role.
  • Demonstrated expertise across multiple domains: web/mobile application, API, network, infrastructure, and cloud (AWS and/or Azure) penetration testing.
  • Strong understanding of exploitation and post-exploitation techniques, attack-path chaining, and objective-based adversary emulation.
  • Proficiency with industry-standard offensive tooling such as Burp Suite Professional, Nmap, Metasploit, and Kali Linux, along with vulnerability scanners.
  • Proficiency in at least one scripting or programming language (e.g., Python, Go, PowerShell, Ruby, or Bash) to build custom tools and automation.
  • Working knowledge of the MITRE ATT&CK framework and hands-on experience mapping engagements to adversary TTPs.
  • Excellent written and verbal communication skills, with the ability to present findings to both technical audiences and executive leadership.

**What You May Need to be Successful:**

  • Advanced offensive certifications (e.g., OSEP, OSCE³, CRTO, GXPN) and a track record of original security research, CVEs, or responsible disclosures.
  • Experience with cloud-native attack techniques and container/Kubernetes (EKS/AKS) and serverless security testing.
  • Experience operating or evaluating continuous/autonomous pen testing and breach-and-attack-simulation platforms.
  • Familiarity with detection engineering, SIEM/EDR platforms, and building purple team feedback loops into SOC content.
  • Knowledge of compliance and security frameworks relevant to our environment.
  • Experience mentoring junior engineers and helping mature an offensive security program.

**Why Join Us at First Advantage?**

At First Advantage, team members are united around a noble purpose: helping organizations to safeguard their workplaces and manage risk. The company’s culture is shaped by its core values — Authenticity, Curiosity, Integrity, Teamwork, Customer-Inspired — empowering team members to bring their best ideas forward, collaborate across departments, and make a real impact.

First Advantage offers a variety of culture programs and benefits designed to enhance employee experience and development.

  • Employee Impact Groups
  • FA Cares volunteer opportunities
  • Mentorship Advantage Program
  • SOAR, award-winning manager development program

**We have great people here and are looking for more. Come join us!**

**Fraud Alert**

First Advantage does **not** charge candidates any fees at any stage of the recruitment process. We will never ask you to make a payment, purchase equipment, transfer money, or provide financial account information to obtain employment. If anyone claiming to represent First Advantage requests payment or other financial information, please treat the communication as suspicious and contact us through this website for verification.

Follow us:

  • [Facebook](https://www.facebook.com/FirstAdvantage1)
  • [Instagram](https://www.instagram.com/first_advantage/)
  • [LinkedIn](https://www.linkedin.com/company/first-advantage)
  • [X](https://twitter.com/firstadvantage)
  • [YouTube](https://www.youtube.com/user/FirstAdantage1)

***Equal Employment Opportunities at First Advantage**
**First Advantage is an equal opportunity employer. We are committed to providing a workplace and recruitment process that is free from unlawful discrimination, harassment, and retaliation. Employment decisions at First Advantage are based solely on qualifications, merit, and business needs. We do not discriminate in any aspect of employment on the basis of race, color, national origin, ancestry, citizenship, religion, creed, sex, gender identity, gender expression, sexual orientation, marital or family status, pregnancy, age, physical or mental disability, medical condition, genetic information, veteran or military status, or any other characteristic protected by applicable law.*

First Advantage is a leading provider of global software and data in the HR technology industry. Enabled by its proprietary technology and AI, First Advantage’s platforms, data, and APIs power comprehensive employment background screening, digital identity solutions, and verification services. With a strong emphasis on innovation, automation, and customer success, First Advantage empowers 80,000 organizations to hire smarter and onboard faster. Headquartered in Atlanta, Georgia, First Advantage serves customers in over 200 countries and territories, modernizing hiring and onboarding on a global scale. For more information, please visit our website at [https://fadv.com/](https://fadv.com/).

Ready to make an impact and shape the future of trust in the workplace? Explore opportunities and join our team.

As an award-winning global leader in identity and workforce solutions, First Advantage delivers fast, reliable screening and ongoing monitoring at every stage of the employee lifecycle. Join us and help shape the future of trust, guided by our values:

  • Authenticity
  • Curiosity
  • Integrity
  • Teamwork
  • Customer-inspired

Be a part of the growth, innovation, and impact we’re building at First Advantage!

  • Professional development opportunities, such as our award-winning SOAR program
  • Generous Paid Time Off Program\*
  • Volunteer Time Off (VTO) Policy to encourage involvement in philanthropic activities\*
  • Competitive benefits (medical, dental, etc.)\*
  • Global Employee Assistance Program (EAP) available to all team members
  • Opportunities to connect with colleagues across six Employee Impact Groups and participate in Employee Experience events throughout the year

\*Must meet hourly work requirement to be eligible

Apply today to learn more about why we’re proud to say #WeAreFA!

First Advantage does **not** charge candidates any fees at any stage of the recruitment process. We will never ask you to make a payment, purchase equipment, transfer money, or provide financial account information to obtain employment. If anyone claiming to represent First Advantage requests payment or other financial information, please treat the communication as suspicious and contact us through this website for verification.

Job data: Headcount Labs (headcountlabs.com), ODbL 1.0. The job description belongs to the employer. Location data © OpenStreetMap contributors and Overture Maps.

Key skills

Required

AWSBash ScriptingKubernetesLinuxMicrosoft AzurePenetration TestingPowerShellPythonSIEMSecurity QA & TestingCompliance

Soft skills

CommunicationLeadership

Job market insights

3,001active AWS jobs in India
452active Bash Scripting jobs in India
1,829active Kubernetes jobs in India
₹11L – ₹25L advertised yearly salary for IT Jobs in India (middle half of 825 posts that show a salary; median ₹17L)

Jobs asking for AWS in India also ask for

  • Microsoft Azure56%
  • Python54%
  • Google Cloud Platform (GCP)46%
  • CI/CD43%
  • Kubernetes35%

From live job posts on CoreHRx, updated 11 Nov 2026. Skill figures count posts that list their skills; salary figures only posts that show a salary.

Questions about this job

What is the salary for this Senior Offensive Security Engineer job?

The post does not state the pay. As an estimate, comparable posts on CoreHRx advertise ₹11L – ₹25L a year (typical for IT Jobs in India, 825 posts).

How much experience does this job need?

The post asks for 5 Yrs experience.

What kind of job is this?

It is a full time job.

This page is for Indian job seekers preparing for cloud engineer, DevOps, backend and solutions architect roles that list AWS as a skill, whether you are a fresher with a first certification or an experienced engineer moving into a senior role. It covers 60 questions in three levels: core services and concepts, then design and configuration choices for one to three years of experience, and finally scenario, security, cost and troubleshooting questions asked in senior rounds. Read each answer, explain it aloud in your own words, and try the CLI commands in a practice account with a billing alert set.

Questions you may be asked

  1. What is the difference between an AWS Region and an Availability Zone?
  2. Explain the AWS shared responsibility model.
  3. What is Amazon EC2, and how do you read an instance type name like m7g.large?
  4. What is Amazon S3, and what are its main storage classes?

Get IT jobs by email

Create a free profile and we email you new IT jobs, at most once a week.

Similar jobs

Free · takes a minute · your resume fills your profile