Red Team Security Specialist - 100% Remote APAC — Columbus
Traveler-Friendly Insight
Ideal for the Nomadic Security Professional
This role is exceptionally well-suited for digital nomads. The team explicitly describes itself as results-oriented, not time-based, meaning there are no fixed clock-in hours or mandatory timezone windows. You deliver weekly output — RCE demonstrations, PoC reports, vulnerability chains — on your own schedule. Minimal meetings further reduce synchronous friction.
Timezone Flexibility: With a focus on APAC and Middle East hiring, any UTC+2 through UTC+9 timezone is likely comfortable. Popular nomad bases in this band include Bali (UTC+8), Chiang Mai (UTC+7), Tbilisi (UTC+4), and Dubai (UTC+4).
Visa Considerations:
- Thailand: The LTR (Long-Term Resident) visa or the new Digital Nomad visa pilot suits high-skilled remote workers. Chiang Mai's low cost of living (~$1,200–$1,800/mo) pairs well with USD pay.
- Georgia (Tbilisi): Remotely From Georgia program allows 1-year stays; cost of living ~$1,000–$1,500/mo — excellent USD purchasing power.
- UAE (Dubai): Freelancer/remote work visa available; higher COL (~$3,500+/mo) but tax-free income and APAC/ME proximity.
- Indonesia (Bali): New digital nomad visa (E33G) allows up to 5-year stays for remote workers.
No equipment stipend or coworking allowance is mentioned, so factor workspace costs into your budget. The weekly salary cadence provides good cash flow for nomadic budgeting.
About the Role
We are actively seeking an experienced Red Team Offensive Security Specialist to join our remote cybersecurity team. In this role, you will conduct deep-dive, authorized offensive security assessments to identify, exploit, and validate critical vulnerabilities within active production environments. We are a results-oriented team that values practical execution, advanced post-exploitation capabilities, and long-term collaboration with independent professionals.
Responsibilities
- Conduct comprehensive, authorized security assessments on assigned client targets to identify and exploit critical security gaps.
- Demonstrate advanced post-exploitation capabilities, including achieving stable Remote Code Execution (RCE) or Get-Shell on complex targets.
- Identify, analyze, and chain complex vulnerabilities (including server-side misconfigurations, advanced logic flaws, and WAF/EDR evasion).
- Provide verified, stable Proof of Concept (PoC) demonstrations to illustrate the real-world business impact of identified vulnerabilities.
- Work independently and maintain a consistent, high-quality weekly output.
Requirements
- Proven Track Record: Extensive, hands-on experience in real-world, authorized penetration testing and Red Team operations. (Please note: Experience limited solely to CTFs, training labs, Bug Bounty reporting without full exploitation, or simulated environments does not meet the requirements for this position).
- Technical Expertise: Deep understanding of web application vulnerabilities, server infrastructure misconfigurations, reverse shell creation, and advanced privilege escalation methodologies.
- Autonomy: Strong ability to work independently with minimal supervision in a fast-paced, remote environment.
- Professionalism: High sense of operational security (OPSEC), responsibility, and strict adherence to client confidentiality.
Perks
- 100% Remote work.
- Compensation in USD.
- Flexible working hours (results-oriented, not time-based).
- Performance-based bonuses.
- Independent work style with minimal meetings.
- Weekly base salary.
Apply Now!
Please submit your updated resume to [email protected] with the subject line "Application: Offensive Cybersecurity Engineer".
Frequently Asked Questions
Is this role fully remote with no location requirement?
Are fixed working hours required for this role?
Does Bug Bounty experience count toward the requirements?
What is the payment structure for this role?
How do I apply for this position?
