Senior Offensive Security Consultant | Cyber Defense & Resilience | Romania Bucharest

Senior Offensive Security Consultant | Cyber Defense & Resilience | Romania
Bucureşti
Bucharest, Bucharest, Romania

Description

& Requirements Who we are looking for ✔ Are you passionate about offensive security and thrive on uncovering vulnerabilities before adversaries do?

✔ Do you want to work with global and Hungarian clients on
- impact penetration tests and adversary emulation engagements?

✔ Are you eager to sharpen your skills in red teaming, threat intelligence, and
- edge attack simulation? Join our Cyber Attack Surface Management team and help leading organizations strengthen their resilience by delivering
- led offensive security engagements. Work alongside industry professionals, contribute to complex projects, and grow your career in one of the most dynamic areas of cybersecurity. ?  What we expect from you:

5+ years of
- on penetration testing/offensive security experience across domains.

OSCP certification (mandatory) – additional offensive certs (OSEP, OSED, CRTO, GXPN) are a plus.

Strong expertise in Windows, Linux, and Active Directory attack paths (Kerberoasting, AS-REP, ACL abuse, DCSync/DCShadow, LAPS, local admin hygiene).

Proficiency with core offensive tools: Burp Suite, Nmap, Metasploit/Impacket, Blood
Hound/Sharp
Hound, Kerberos tooling, Responder/NTLM relay, JWT/OAuth/OIDC testing, cloud utilities (AWS/Azure/GCP).

Scripting/automation in at least two: Python, Power
Shell, Bash, Go.

Strong communication skills – ability to write executive-level narratives and precise technical guidance.

Familiarity with MITRE ATT&CK,  threat-led testing frameworks (e. g. , TIBER-EU), and converting threat intel into emulation plans.

Your future role

As a Senior Offensive Security Consultant, you will:

Lead and deliver multi-domain penetration tests (external, internal, AD, cloud, wireless, web/API, mobile) from scoping to reporting, using PTES, NIST SP 800-115, and OWASP methodologies.

Build intelligence-led test plans, aligning with client use cases and mapping to MITRE ATT&CK.

Conduct adversary emulation (threat-led testing / TIBER-EU scenarios), including OSINT, phishing support, and
- exploitation tradecraft.

Correlate findings with threat intelligence and produce concise, actionable reports (executive summaries, exploit chains, remediation roadmaps).

Maintain and extend your ethical hacking toolkit (Burp Suite, Nmap, Impacket, Blood
Hound, Kerberos tooling, cloud assessment utilities, C2 frameworks).

Mentor junior consultants, review methodologies and deliverables, and contribute to internal knowledge bases.

Stay ahead of the curve by tracking the latest exploits, actor tradecraft, and detection evasion techniques.

Collect, triage, and analyze threat intelligence (feeds, reports, STIX/TAXII, MISP/Open
CTI, Shodan/Censys).

Map IOCs/TTPs to ATT&CK techniques and client detection capabilities.

Translate intel into repeatable emulation steps and validation criteria.

What we offer Be part of a global team delivering cybersecurity solutions that make a real impact. You’ll work in an environment that values technical depth, learning, and collaboration. At Deloitte, we’ll help you grow your skills, gain international experience, and contribute to shaping the cybersecurity landscape. ? ?  Fringe benefits:

Flexible Benefits Plan – an allowance per month for benefits (eg medical subscription, meal tickets, private pension)​.

Annual performance bonus.

Working in hybrid mode.

2 additional days off per year for medical leave without a medical certificate​.

Comprehensive travel insurance (both work and personal travel)​.

Days off for special personal events, accordingly to the Internal Regulations​.

Bookster subscription​.

Learning & Development: Linked
In Learning, Udemy for Business, get
Abstract​.

The employee assistance program: 24/7 consultancy (financial, psychological, legal)​.

Teleworking allowance.