Offensive Security Engineer

Responsibilities

• Monitor, map, and test Sporty’s entire external attack surface, including all Sporty Group external domains, subdomains, websites, and public IP addresses.
• Conduct adversary emulation exercises against internal and office endpoints to validate the effectiveness of EDR, XDR, and SOC monitoring platforms.
• Evaluate the security posture of physical office hardware, corporate network equipment, and internal edge infrastructure.
• Perform scoped offensive testing on external-facing web applications and limited, public-facing API endpoints.
• Translate external discovery, DNS security posture, network access control weaknesses, and EDR emulation findings into repeatable defensive checks.
• Support our Purple Team validate that EDR policies, perimeter controls, firewall rules, and network segmentation work as expected.
• Document multi-stage network or system exploitation chains to provide practical, reproducible remediation blueprints for infrastructure and SOC teams.
• Support IT and Network analysts with clear vulnerability descriptions, triage steps, severity logic, and escalation guidance.
• Improve external asset tracking, perimeter health records, and exposure trend mapping.
• Track external vulnerability gaps, emulation success rates, remediation times, asset health, and perimeter exposure.

Languages