Senior Offensive Security Specialist

Help improve the cyber resilience of our clients by engineering, hacking and emulating real-world threats against challenging IT environments at Deloitte.

Benefits

• You’ll receive a profit-sharing bonus on top of your fixed salary.
• Continuous professional growth through our development program.
• A work-from-home office setup allowance to ensure you have everything you need for an ergonomically designed workstation, plus an internet allowance.
• The option to work part-time (32 hours a week) or full-time (40 hours a week).

Be the true you

You have a passion for offensive security and for finding creative ways to break into highly secured environments by identifying ways around defenses. When you encounter new types of environments or technologies, you are able to develop new tools and techniques to reach your objective.

What impact will you make?

As a Senior Offensive Security Specialist, you will work in a highly skilled team to perform challenging security tests for international clients. Using your offensive and engineering skills, you will exploit client networks, perform tactical network exploitation (TNE) and provide hands-on support to strengthen the client’s security posture. To sharpen your skills, you will join periodic Deloitte Global Offensive Security community knowledge exchange sessions, follow trainings and perform research on the latest techniques and tools.

You also have:

• a Computer Science degree or similar;
• a passion for offensive security and a drive to stay up-to-date with current exploits, attack techniques and new vulnerabilities;
• experience with protocols at the various layers of the OSI model, including ARP, PPP, IPsec, IP, TCP, UDP, ICMP, TLS, SOCKS, ASCII, UTF-8, Base64, CRC, HTTP, QUIC, SMB, and others;
• experience with web application security testing, using Burp and exploiting SQL injection, file inclusion and HTTP request smuggling vulnerabilities, including experience with scripting to automate repetitive tasks;
• experience with complex infrastructures, both from an engineering and offensive perspective, evaluating possible entry points at different layers of the protocol stack and exploiting those to get a foothold in the client’s network and laterally move;
• experience evaluating the security of Windows and Linux operating systems and Azure Active Directory environments, identifying possible escalation paths and security misconfigurations;
• relevant security certifications are preferred, for example: OSCP, OSEP, OSWE, eCPTX, eWPTX, GXPN, and others;
• excellent communication skills and fluency in written and spoken English.

How do you do this?

• find creative ways to exploit client applications and infrastructure;
• apply a hacker’s mindset to bypass protections and identify cracks within target systems;
• provide clients with technical recommendations that match their situation and environment;
• turn security weaknesses into tailored and concrete recommendations, present them to clients, and provide hands-on support to help improve their security posture;
• perform offensive research on new technologies and develop methodologies to evaluate the security of the setup and configuration;
• share your research within the Deloitte Global Offensive Security community and with the broader security community, for example by writing blogs, speaking at conferences, or publishing code.

“Als onderdeel van ons diverse en internationale team draag je bij aan het leveren van een positieve impact op de samenleving door de industriële operaties van marktleiders te beve...”

Katinka Kruseman Aretz Manager Cyber Secure Emerging Technologies