Offensive Security Support Specialist

Salary Range: $55,000-$80,000

The opportunity

This full-time Offensive Security Support Specialist role supports our Security Risk Assessment and Penetration Testing teams through a blend of operational coordination, technical execution, and client support. The position is responsible for key functions across vulnerability scanning, device management, reporting, and service delivery support. The right candidate will work alongside experienced cybersecurity professionals, gain exposure to a wide range of technologies and security tools, and help improve the processes that scale how we deliver services.

Duties and responsibilities

Vulnerability scanning

• Perform network vulnerability scans to support Security Risk Assessment and Penetration Testing engagements
• Coordinate and schedule scanning activities across multiple client locations
• Manage scanning device configuration and delivery logistics
• Deploy, configure, and maintain Qualys agents in client environments
• Maintain, optimize, and troubleshoot the Qualys cloud vulnerability scanning platform
• Produce client-ready vulnerability scanning deliverables (reports, evidence, and supporting documentation) and maintain associated templates and documentation
• Track and stay current on critical vulnerabilities and emerging threats, and provide guidance as needed
• Provide support for scan execution, issue resolution, and vulnerability remediation coordination
• Contribute to standardizing processes and procedures with an emphasis on continuous improvement

Device management

• Configure, manage, and maintain physical and virtual devices used for penetration testing and vulnerability scanning
• Coordinate device logistics, including shipping, delivery, inventory tracking, and setup
• Help standardize processes and procedures with an emphasis on continuous improvement
• Troubleshoot and support penetration testing tools and systems (e.g., password-cracking workstations, Kali Linux images)

Client coordination and support

• Interact directly with clients via email and phone to coordinate scanning activities, troubleshoot issues, and set expectations
• Communicate security topics clearly to a diverse audience and partner effectively with internal teams and client stakeholders

Additional responsibilities

• Support offensive security engagements through operational, technical, and coordination activities
• Assist with assessment-related activities and support the delivery of client-facing cybersecurity services
• Conduct security risk assessment walkthroughs with clients and internal stakeholders

Reports to

• Directory of Operations with additional reporting/coordination with the Director Cyber Advisory & Engineering and Offensive Security Supervisor

Qualifications

• Relevant hands-on experience is most important for this role. Experience in cybersecurity operations, vulnerability management, IT support, or help desk environments is strongly valued. A degree is not required.
• Experience working with operating systems (Windows, *Nix, and macOS)
• Experience working with vulnerability scanning tools (e.g., Nessus, Qualys)
• Must have a home workspace adequate for receiving, provisioning, and shipping offensive security devices (minicomputers) or work from existing CW office.