Offensive Security Analyst - Red Team

Job Title: Red Team / Offensive Security AnalystLocation: Hybrid – New York, NYLong Term Contract

Want to make an application Make sure your CV is up to date, then read the following job specs carefully before applying.
About Smart IT Frame:At Smart IT Frame, we connect top talent with leading organizations across the USA. With over a decade of staffing excellence, we specialize in IT, healthcare, and professional roles, empowering both clients and candidates to grow together.
Job SummaryWe are seeking an experienced Red Team / Offensive Security Analyst to conduct penetration testing, vulnerability assessments, and simulated cyberattacks across applications, networks, infrastructure, and cloud environments. The ideal candidate will identify security weaknesses, analyze potential attack paths, document findings, and collaborate with security and development teams to strengthen the organization's security posture.
Key Responsibilities1. Security Testing & Vulnerability AssessmentsConduct penetration testing of web applications, APIs, networks, infrastructure, Linux and Windows systems, cloud environments, and mobile applications.Perform vulnerability assessments using automated tools and manual testing techniques.Simulate real-world cyberattacks to evaluate security controls and system resilience.2. Exploitation & Security AnalysisIdentify and validate exploitable vulnerabilities in systems and applications.Analyze security flaws, misconfigurations, insecure code, and weaknesses in authentication and access controls.Assess network defenses, exposed credentials, and potential attack paths.3. Reporting & DocumentationDocument vulnerabilities, testing methodologies, and supporting evidence.Prepare detailed technical reports and executive-level summaries.Communicate security risks, business impact, and remediation recommendations to stakeholders.4. Remediation & Security ImprovementsRecommend corrective actions to address identified vulnerabilities and security gaps.Collaborate with development, infrastructure, and IT operations teams to implement security fixes.Conduct retesting and follow-up assessments to validate remediation.5. Security Tools & AutomationUse offensive security tools, including Metasploit, Nmap, Burp Suite, Kali Linux, vulnerability scanners, and Pentera Console and Surface.Develop automation scripts using Python and Bash.Create custom testing methodologies and proof-of-concept exploits for authorized security assessments.6. Threat Research & Continuous LearningStay current with emerging cyber threats, exploitation techniques, OWASP guidance, and CVEs.Research new attack vectors, vulnerabilities, and penetration testing methodologies.Apply current threat intelligence to security assessments.7. Collaboration & Security AdvisoryWork closely with security teams, developers, infrastructure teams, and IT operations.Provide guidance on secure coding practices and security best practices. xzbcwsv Support compliance initiatives, security audits, and risk assessments.
Required SkillsRed Team Operations and Offensive SecurityPenetration Testing and Vulnerability AssessmentWeb Application and API SecurityNetwork and Infrastructure SecurityLinux and Windows SecurityCloud and Mobile Application SecurityExploitation Techniques and Attack Path AnalysisMetasploit, Nmap, Burp Suite, and Kali LinuxPentera Console and SurfacePython and Bash ScriptingOWASP and CVE KnowledgeVulnerability Reporting and Remediation ValidationSecurity Risk Assessment and Stakeholder Communication
Apply today or share profiles at