Cybersecurity Senior Offensive & Defensive Engineer(Oniste)

Nexsoll is a dynamic digital innovation company founded in 2024, dedicated to helping organizations accelerate growth through lead generation, strategic digital marketing, and enhanced customer engagement. We prioritize the trust our users place in us by safeguarding their data with the utmost commitment. We are seeking a highly skilled security expert who approaches security challenges with the mindset of an attacker while engineering robust defenses to protect our systems.

Key Responsibilities

- Hunt for critical bugs: Conduct thorough penetration tests and code reviews across web applications, APIs, mobile platforms, cloud infrastructure, and internal networks to identify vulnerabilities before they can be exploited.

- Think like the adversary: Lead red team exercises simulating real-world attack scenarios, including initial access, privilege escalation, lateral movement, and data exfiltration.

- Build layered defenses: Design and implement defense-in-depth strategies such as Web Application Firewalls (WAF), rate limiting, bot mitigation, DDoS protection, zero-trust access models, and network segmentation.

- Harden everything: Secure cloud environments (AWS, Azure, or GCP), container orchestration platforms, CI/CD pipelines, secrets management, and identity and access management systems.

- Detect and respond: Establish monitoring systems, Security Information and Event Management (SIEM) tools, alerting mechanisms, and develop incident response playbooks to ensure rapid detection and mitigation of security incidents.

- Secure the code: Collaborate closely with development teams to integrate security into the software development lifecycle through threat modeling, static and dynamic application security testing (SAST/DAST), dependency scanning, and secure code reviews.

- Lead incident response: Act as the primary point of contact during security incidents, managing containment, investigation, and remediation efforts to prevent recurrence.

- Raise the bar: Train engineering teams, establish security standards, and foster a security-first culture that integrates seamlessly into daily operations without becoming a bottleneck.

Required Qualifications

- Minimum of 7 years of hands-on experience in offensive and/or defensive security roles.

- Proven track record of discovering critical vulnerabilities, demonstrated through CVEs, bug bounty Hall of Fame entries, published research, or documented penetration testing results.

- Deep understanding of OWASP Top 10 vulnerabilities, API security, authentication and authorization flaws, injection attacks, SSRF, deserialization issues, and business logic vulnerabilities.

- Proficiency with security tools such as Burp Suite, Metasploit, Nmap, Ghidra/IDA, Cobalt Strike, or equivalents.

- Solid experience securing cloud platforms (AWS, Azure, or GCP) and hardening containerized environments including Kubernetes.

- Expertise in defending against large-scale attacks such as DDoS, credential stuffing, bot attacks, and automated exploitation.

- Strong coding and scripting skills in languages like Python, Go, Bash, or similar for developing custom tools and automating defenses.

- Excellent communication skills, capable of articulating complex security risks to both technical teams and executive leadership.

- Relevant certifications such as OSCP, OSCE³, OSEP, OSWE, GXPN, CRTO, or equivalent.

- Demonstrated presence in the security community through rankings on platforms like HackerOne, Bugcrowd, or Intigriti, or success in Capture The Flag (CTF) competitions.

- Contributions to the field via published CVEs, security research, or presentations at conferences such as DEF CON, Black Hat, or BSides.

- Familiarity with compliance frameworks including SOC 2, ISO 27001, or PCI-DSS.

- Experience in malware analysis, reverse engineering, or threat intelligence is highly valued.

Preferred Qualifications and Benefits

Nexsoll offers a competitive salary complemented by performance-based bonuses. You will join a leadership team that prioritizes security at every level, providing a supportive environment where your expertise will directly impact the company’s resilience against sophisticated cyber threats. This role offers the opportunity to shape security culture and infrastructure in a fast-growing digital innovation firm.