ApplaudoStudios
Senior Offensive Security Engineer (Azure & Entra ID)
MX · Mexico City · Mexico City, CDMX, Mexico · Remote · Contract · Senior
Salary not stated
AI summary
About the company
Applaudo 是 AI 原生组织，提供设计、开发、云、数据、AI 等解决方案，打造高绩效文化，核心价值观为卓越、协作、尊重、透明、高效沟通。
Role overview
该岗位为 ApplaudoStudios 的合同岗位，初始期限2个月可延长，远程工作。任职者需负责 Azure 与 Entra ID 环境的边界入侵测试，评估安全控制有效性，向云管理员解释攻击路径，需具备 B2+ 英语能力。
Responsibilities
- 主导两个 Azure 租户的身份与边界入侵测试
- 从授权立足点尝试 Entra ID、Azure RBAC 等权限提升
- 评估订阅间、租户间的分离控制有效性
- 尝试访问密钥库、存储等敏感资源
- 评估 AKS 工作负载并测试容器逃逸等
- 关联云与应用层发现形成端到端攻击路径
- 移除测试创建的所有人工制品
- 重测修复后的攻击路径并提交复现报告
Requirements
- 计算机科学等相关专业学士或同等经验
- 具备端到端渗透测试全流程经验
- 熟悉 Microsoft Entra ID offensive 测试
- 掌握 Azure RBAC 权限提升与滥用
- 熟悉 Azure offensive 工具链
- 具备跨订阅/租户攻击路径分析能力
- 掌握 CVSS v3.1 评分与合规报告撰写
- 英语 B2+ 水平，可向客户解释攻击路径
Nice to have
- 具备 Kubernetes 与 AKS offensive 测试经验
- 熟悉 Entra Connect、ADFS 混合身份攻击路径
- 掌握 OWASP WSTG 与 API 安全标准
- 能解读 Defender for Cloud 或 CSPM 输出
- 持有 CARTP、OSCP、OSEP 等相关认证
Notes for China-based candidates
- 远程工作，无地域限制
- 合同形式为2个月初始期限可延长
- 需具备 B2+ 英语能力
- 需熟悉 Azure 与 Entra ID 安全测试
Register to apply directly, open the original posting and save jobs
Sign up freeThis is not an official page of ApplaudoStudios. The listing is gathered automatically from the employer's official careers page or a job board's public feed (see sources on the right). Fintegrity has no agency relationship with this employer and has not verified its credentials. Chinese titles and summaries are AI-generated; the original text prevails. Apply on the source page. We never charge job seekers. Ranking & display rules
Excerpt
Job Description About You You are an offensive security professional with hands-on expertise in Microsoft Entra ID, Azure privilege escalation, and identity-driven attack paths. You can start from an approved foothold, assess security boundaries, and demonstrate whether controls prevent access to…
Sign up freeThe summary and highlights are AI-generated and may contain errors; the original posting prevails.
Sources or employers who want a posting removed or corrected can email contact@fintegrity.cn; we act within 24 hours.