Offensive Security Engineer
Sporty Group is looking for a Red Team Expert to emulate the full kill chain of real-world adversaries targeting the business. The role involves planning and executing objective-driven operations, ranging from external initial access through to Active Directory domain compromise and actions against critical assets.
The successful candidate will operate covertly against a monitored environment to test detection controls and prove the extent of potential attacker reach. Following these operations, the individual will collaborate with the Blue Team to translate findings into concrete detection engineering improvements and defensive enhancements.
- Scope, plan, and execute full-scope red team engagements and long-horizon adversary emulation campaigns mapped to real threat-actor TTPs and the MITRE ATT&CK framework.
- Execute the complete attack chain: OSINT and reconnaissance, initial access (phishing, payload delivery, public-facing exploitation), establishing and operating covert C2, persistence, privilege escalation, lateral movement, and domain/cloud takeover.
- Develop and deploy custom tooling, payloads, and C2 infrastructure; build and maintain resilient, OPSEC-safe redirector and command-and-control environments.
- Research and weaponize EDR/XDR evasion and bypass techniques - in-memory execution, process injection, AMSI/ETW tampering, and defense-evasion tradecraft - against CrowdStrike, SentinelOne, and Microsoft Defender XDR.
- Compromise Active Directory and hybrid/cloud identity: Kerberos attacks, ACL and delegation abuse, ADCS exploitation, and lateral movement across on-prem and cloud infrastructure (AWS).
- Run assumed-breach, insider-threat, and social-engineering scenarios, including physical and office-network intrusion paths where in scope.
- Work directly with the Blue Team to replay attack chains, validate and tune detections, and measurably close detection and response gaps.
- Document full attack narratives, kill-chain diagrams, and reproducible proof-of-concept steps that let defenders rebuild and detect every stage.
- Translate operational findings into prioritized, actionable remediation and detection-engineering guidance for IT, Network, and Security teams.
- Track operational metrics: objectives achieved, detection and response times, dwell time, evasion success rates, and remediation follow-through.
- Contribute to maturing Sporty's red team capability and threat-informed defense, sharing tradecraft with internal offensive and defensive staff.
- 5+ years of hands-on experience in offensive security, perimeter penetration testing, network security assessments, red teaming, or adversary emulation (required).
- Strong understanding of external asset discovery, DNS configuration vulnerabilities, and public IP network routing (required).
- Practical experience auditing and testing Linux and Windows environments and underlying network services (required).
- Proven ability to perform adversary emulation and bypass techniques against modern EDR/XDR solutions (required).
- Familiarity with testing physical office network hardware, routers, switches, firewalls, and workplace IT systems (required).
- Ability to turn external exposures and technical network risks into clear, actionable fixes for IT and Security teams (required).
- Experience with core web vulnerabilities and limited, scoped testing of modern API interfaces (required).
- Strong scripting ability in Python, PowerShell, Bash, or similar to automate perimeter mapping, emulation workflows, and asset discovery (required).
- Good understanding of scanning, reconnaissance, and interception tools (required).
- Strong documentation skills (required).
- Certifications (one or more required): OffSec (OSCP / OSCP+, OSEP, OSWE, OSED, OSCE3, OSWA, OSMR, OSEE), Hack The Box (CPTS, CBBH, CWEE, CAPE), Red Team / Active Directory (CRTO, CRTL, CRTP, CRTE, CRTM), GIAC (GPEN, GXPN, GWAPT, GRTP, GCPN), Other recognized (PNPT, eCPPT / eWPTX / eMAPT, BSCP, CREST CRT / CCT, CPTE) (required).
- Community and competitive track record: Bug bounty recognition (bounty awards, hall-of-fame listings, or published CVEs through HackerOne, Bugcrowd, Intigriti, YesWeHack, or vendor-run programs) or CTF achievements (active player on a ranked CTFtime team, Hack The Box Hall of Fame or Pro Lab completions, or finalist/podium placements in recognized competitions) (required).
- A competitive salary + individual performance based bonuses every quarter
- 28 days paid annual leave
- Core working hours are 10am-3pm in your local time zone with flexibility outside of this
- Referral bonuses & flash bonuses
- Top of the line equipment
- Annual company retreats
Sporty Group is a sports technology company whose brands include SportyBet, a mobile-first sportsbook licensed in Nigeria, Ghana, Kenya, Zambia, Tanzania and Uganda, alongside the Sporty.com app and the SportyTV broadcast service in Nigeria. SportyBet has sponsorship partnerships with Real Madrid and Manchester City. The group hires across Europe, Latin America and Asia, and many of its technology and product roles are remote.