Offensive Security Engineer

About the role

Golomt Bank is seeking an experienced Offensive Security Engineer to join its cybersecurity team in Ulaanbaatar. In this full‑time, on‑site position you will lead penetration testing and red‑team activities to uncover vulnerabilities across applications, networks and infrastructure.

Key responsibilities

• Design and execute comprehensive penetration tests and threat simulations.
• Conduct red‑team exercises to assess the effectiveness of existing security controls.
• Analyze findings, produce detailed reports and provide clear remediation guidance.
• Collaborate with security, IT and development teams to prioritize risks and support secure design reviews.
• Develop and maintain offensive security methodologies, tools and scripts.
• Stay up‑to‑date with emerging threats, exploitation techniques and industry best practices.

Required profile

• Strong background in information security, risk assessment and security policies.
• Hands‑on experience with penetration testing methodologies and offensive security tools.
• Proficiency in scripting or programming (Python, Bash, PowerShell) for automation.
• Ability to communicate technical findings clearly to both technical and non‑technical stakeholders.
• High ethical standards and a collaborative mindset.

Required skills

• Penetration testing and red‑team operations.
• Threat simulation and vulnerability assessment.
• Python, Bash, PowerShell scripting.
• Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux.
• Secure coding principles, web and mobile application testing.
• Network protocols, secure architecture and network device testing.