🎁 Before you apply, rehearse this interview. Create your free WorkMundi account and get an Interview Training on HelpsYouSpeak — no cost, no card. I want my training →
About the role Mission Strengthen Sporty’s offensive security posture by proactively testing and identifying vulnerabilities across our external perimeter, standalone virtual private servers (VPS), physical office infrastructure, and endpoint defenses. The Offensive Security Engineer owns the security testing, continuous perimeter monitoring, and reconnaissance across all Sporty Group external domains, websites, public IP blocks, and DNS configurations. This role works closely with IT, Network Engineering, SOC, and Security teams to convert external discovery, adversary emulation on EDR/XDR systems, and exploitation insights into tuned perimeter controls, firewall rules, and robust defensive guardrails. What you'll be doing Monitor, map, and test Sporty’s entire external attack surface, including all Sporty Group external domains, subdomains, websites, and public IP addresses. Conduct adversary emulation exercises against internal and office endpoints to validate the effectiveness of EDR, XDR, and SOC monitoring platforms. Evaluate the security posture of physical office hardware, corporate network equipment, and internal edge infrastructure. Perform scoped offensive testing on external-facing web applications and limited, public-facing API endpoints. Translate external discovery, DNS security posture, network access control weaknesses, and EDR emulation findings into repeatable defensive checks. Support our Purple Team validate that EDR policies, perimeter controls, firewall rules, and network segmentation work as expected. Document multi-stage network or system exploitation chains to provide practical, reproducible remediation blueprints for infrastructure and SOC teams. Support IT and Network analysts with clear vulnerability descriptions, triage steps, severity logic, and escalation guidance. Improve external asset tracking, perimeter health records, and exposure trend mapping. Track external vulnerability gaps, emulation success rates, remediation times, asset health, and perimeter exposure. What you'll bring Experience in offensive security, perimeter penetration testing, network security assessments, or adversary emulation. Strong understanding of external asset discovery, DNS configuration vulnerabilities, and public IP network routing. Practical experience auditing and testing Linux and Windows environments and underlying network services. Ability to perform adversary emulation and bypass techniques against modern EDR/XDR solutions. Familiarity with testing physical office network hardware, routers, switches, firewalls, and workplace IT systems. Ability to turn external exposures and technical network risks into clear, actionable fixes for IT and Security teams. Experience with core web vulnerabilities and limited, scoped testing of modern API interfaces. Strong scripting ability in Python, PowerShell, Bash, or similar to automate perimeter mapping, emulation workflows, and asset discovery. Good understanding of scanning, reconnaissance, and interception tools. Strong documentation skills. Technology Expertise Any of the following: Kali Linux toolset, Nmap, Shodan, Censys, Masscan, Amass, Dig/DNS testing tools, Wireshark, Burp Suite, OWASP ZAP, Microsoft Defender XDR, CrowdStrike Falcon, SentinelOne, Atomic Red Team, Caldera, Python, PowerShell, Bash, VPS environments (Linux/Windows Server OS), Firewalls, Routers, Git, Jira, Confluence What's in it for you Sporty is a remote-first company in pursuit of sustainability A competitive salary plus individual performance-based bonuses every quarter 28 days paid annual leave Core working hours of 10am-3pm in your local time zone, with flexibility outside of these hours Referral bonuses and flash bonuses Top-of-the-line equipment Annual company retreats that provide opportunities to connect and collaborate with colleagues from around the world Interview Process: Remote video screening with our Talent Acquisition Team Online assessment via Hackerrank Remote video interview with Team Members (60 Mins) Final discussion with the hiring manager (60 mins) If you're interested, we encourage you to apply. Every application is reviewed by a member of our team, and we aim to respond within 48 hours.
Here's how to pick the right one and stand out in your application.
144.883Jobs
31.687IN
81%EN
That number is real. WorkMundi's database shows 144,883 open engineer roles across the world. India has the most with 31,687 jobs, followed by the United States with 30,084. If you just finished reading one job ad and felt paralyzed by choice, you're not alone—but this scale is actually an advantage. It means you can afford to be selective.
Start by geography and language. The majority of engineer ads—117,837 of them—have the job posting text written in English. Use that as one filter, but remember: the ad text language tells you nothing about whether the role actually requires you to speak English day-to-day. Read the job description carefully. Then check which countries have the volume you're targeting. Singapore, Poland, and Australia round out the top five after India and the US.
Next, learn who's hiring. Accenture has posted 2,801 engineer roles. andurilindustries, speechify, and jobgether are also actively recruiting. If you're applying to one of these names, research their hiring patterns and interview style before you apply. That homework pays off.
When you interview, expect the question every engineer hears: 'Tell me about a time you had to debug a problem that wasn't in your job description.' Have a specific story ready—not a general one. Name the tools, the deadline pressure, and what you learned. Hiring managers listen for whether you see problem-solving as part of the role itself, not a favour.