Offensive Security Analyst - Red Team

Job Title: Red Team / Offensive Security Analyst

Location: Hybrid – New York, NY

Long Term Contract

About Smart IT Frame:

At Smart IT Frame, we connect top talent with leading organizations across the USA. With over a decade of staffing excellence, we specialize in IT, healthcare, and professional roles, empowering both clients and candidates to grow together.

Job Summary

We are seeking an experienced Red Team / Offensive Security Analyst to conduct penetration testing, vulnerability assessments, and simulated cyberattacks across applications, networks, infrastructure, and cloud environments. The ideal candidate will identify security weaknesses, analyze potential attack paths, document findings, and collaborate with security and development teams to strengthen the organization's security posture.

Key Responsibilities

1. Security Testing & Vulnerability Assessments

• Conduct penetration testing of web applications, APIs, networks, infrastructure, Linux and Windows systems, cloud environments, and mobile applications.
• Perform vulnerability assessments using automated tools and manual testing techniques.
• Simulate real-world cyberattacks to evaluate security controls and system resilience.

2. Exploitation & Security Analysis

• Identify and validate exploitable vulnerabilities in systems and applications.
• Analyze security flaws, misconfigurations, insecure code, and weaknesses in authentication and access controls.
• Assess network defenses, exposed credentials, and potential attack paths.

3. Reporting & Documentation

• Document vulnerabilities, testing methodologies, and supporting evidence.
• Prepare detailed technical reports and executive-level summaries.
• Communicate security risks, business impact, and remediation recommendations to stakeholders.

4. Remediation & Security Improvements

• Recommend corrective actions to address identified vulnerabilities and security gaps.
• Collaborate with development, infrastructure, and IT operations teams to implement security fixes.
• Conduct retesting and follow-up assessments to validate remediation.

5. Security Tools & Automation

• Use offensive security tools, including Metasploit, Nmap, Burp Suite, Kali Linux, vulnerability scanners, and Pentera Console and Surface.
• Develop automation scripts using Python and Bash.
• Create custom testing methodologies and proof-of-concept exploits for authorized security assessments.

6. Threat Research & Continuous Learning

• Stay current with emerging cyber threats, exploitation techniques, OWASP guidance, and CVEs.
• Research new attack vectors, vulnerabilities, and penetration testing methodologies.
• Apply current threat intelligence to security assessments.

7. Collaboration & Security Advisory

• Work closely with security teams, developers, infrastructure teams, and IT operations.
• Provide guidance on secure coding practices and security best practices.
• Support compliance initiatives, security audits, and risk assessments.

Required Skills

• Red Team Operations and Offensive Security
• Penetration Testing and Vulnerability Assessment
• Web Application and API Security
• Network and Infrastructure Security
• Linux and Windows Security
• Cloud and Mobile Application Security
• Exploitation Techniques and Attack Path Analysis
• Metasploit, Nmap, Burp Suite, and Kali Linux
• Pentera Console and Surface
• Python and Bash Scripting
• OWASP and CVE Knowledge
• Vulnerability Reporting and Remediation Validation
• Security Risk Assessment and Stakeholder Communication