Offensive Security Engineer, Sporty Group

About the job

About the role

Mission Strengthen Sporty’s offensive security posture by proactively testing and identifying vulnerabilities across our external perimeter, standalone virtual private servers (VPS), physical office infrastructure, and endpoint defenses. The Offensive Security Engineer owns the security testing, continuous perimeter monitoring, and reconnaissance across all Sporty Group external domains, websites, public IP blocks, and DNS configurations. This role works closely with IT, Network Engineering, SOC, and Security teams to convert external discovery, adversary emulation on EDR/XDR systems, and exploitation insights into tuned perimeter controls, firewall rules, and robust defensive guardrails.

What you'll be doing

Monitor, map, and test Sporty’s entire external attack surface, including all Sporty Group external domains, subdomains, websites, and public IP addresses.

Conduct adversary emulation exercises against internal and office endpoints to validate the effectiveness of EDR, XDR, and SOC monitoring platforms.

Evaluate the security posture of physical office hardware, corporate network equipment, and internal edge infrastructure.

Perform scoped offensive testing on external-facing web applications and limited, public-facing API endpoints.

Translate external discovery, DNS security posture, network access control weaknesses, and EDR emulation findings into repeatable defensive checks.

Support our Purple Team validate that EDR policies, perimeter controls, firewall rules, and network segmentation work as expected.

Document multi-stage network or system exploitation chains to provide practical, reproducible remediation blueprints for infrastructure and SOC teams.

Support IT and Network analysts with clear vulnerability descriptions, triage steps, severity logic, and escalation guidance.

How can we help?

How can we help?

Offensive Security Engineer

About the job