Offensive Security Technical Lead

About the role

Service Factory is looking for an Offensive Security Technical Lead to drive complex offensive security engagements and help grow its team in Tirana. The role covers red teaming, adversary emulation, penetration testing and purple teaming, with a hands-on approach to the most technically demanding projects.

Key responsibilities

• Lead red teaming, adversary emulation, penetration testing and purple teaming engagements.
• Design realistic attack scenarios based on the threats most relevant to each client.
• Coordinate assessments across applications, APIs, infrastructure, cloud, networks and identity systems.
• Take a hands-on role in the most complex technical engagements.
• Define scope, objectives and rules of engagement with clients.
• Translate findings into concrete risk assessments and recommendations, and ensure the quality of engagements and deliverables.
• Mentor team members and share knowledge to grow the team.
• Present findings and recommendations to technical and executive stakeholders.

Required profile

• Solid experience in offensive security, red teaming or penetration testing.
• Strong client-facing skills, comfortable owning the technical relationship directly.
• Good command of both Italian and English.

Required skills

• Knowledge of attack techniques against applications, infrastructure and identity systems.
• Experience with Windows, Linux, Active Directory and cloud environments.
• Familiarity with MITRE ATT&CK, OWASP and security testing methodologies.
• Ability to develop custom tools and automation.
• Nice to have: social engineering, vulnerability research, exploit development or detection engineering; Kubernetes, Docker and DevSecOps; TLPT frameworks; offensive security certifications.

Candidates apply by sending their CV to the company's careers contact; only shortlisted candidates will be contacted for an interview.