Skip to content

Open nowPosted 3 days ago

Offensive Security Specialist (m/f/d)

Hapag-Lloyd121 open roles

Where
Hamburg, Germany
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowOffensive Security Specialist (m/f/d)Hapag-Lloyd · Hamburg, Germany
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Hapag-Lloyd's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.8% of postings close within 7 days. Measured by our own scanner across the market. Hapag-Lloyd postings stay open a median of 14 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.8%7 days
  4. 22.3%14 days
  5. 37.8%30 days
  6. 59.0%60 days
This job: posted 3 days ago

Hapag-Lloyd median: 14 days open

The posting

Job Description

Cyber threats are evolving faster than ever, and organizations need offensive security experts who can stay one step ahead. As an Offensive Security Specialist, you will play a critical role in strengthening the cyber resilience of one of the world's leading global shipping and logistics companies.

You'll execute sophisticated penetration tests, simulate real-world attack scenarios, and uncover security weaknesses across modern enterprise environments. Your work will span traditional IT infrastructure, cloud platforms, identity ecosystems, web applications, APIs, operational technology (OT), and emerging AI-powered systems.

You will collaborate closely with security testing, threat intelligence, vulnerability management, and detection engineering teams to transform offensive findings into meaningful security improvements. If you're passionate about ethical hacking, enjoy solving complex technical challenges, and thrive in an environment where your expertise directly influences security strategy and risk reduction, we'd love to hear from you.

Responsibilities

  • Execute penetration tests and red team engagements across infrastructure, cloud environments, applications, APIs, and operational technology systems
  • Simulate real-world attacker behaviors to identify exploitable attack paths and validate organizational resilience
  • Assess security controls across Active Directory, Entra ID, privileged access management solutions, and machine identities
  • Conduct web application, API, and cloud security assessments using leading offensive security methodologies
  • Perform ransomware, supply chain, and adversary simulation exercises to test detection, response, and recovery capabilities
  • Validate the real-world impact of vulnerabilities and support accurate risk prioritization through practical exploitation testing
  • Develop and maintain offensive security tooling, automation scripts, and testing infrastructure
  • Produce high-quality reports with actionable remediation recommendations and present findings to both technical and business stakeholders

Qualifications

  • Bachelor’s or Master’s degree in Cybersecurity, Information Technology, Computer Science, or a related field
  • Several years of hands-on experience in penetration testing, red teaming, or offensive security within complex enterprise environments
  • Strong expertise in network, identity, cloud, application, and API security testing
  • Solid experience with Active Directory, Entra ID, privilege escalation techniques, and identity-focused attack paths
  • Deep understanding of attacker tactics, techniques, and procedures (TTPs) and frameworks such as MITRE ATT&CK
  • Experience conducting security assessments of modern cloud platforms and hybrid environments
  • Strong scripting or development skills used to automate, customize, or enhance offensive security activities
  • Excellent analytical and communication skills, with the ability to translate complex technical findings into business-relevant insights
  • Professional certifications such as OSCP, OSEP, PNPT, CRTO, or comparable offensive security credentials are highly valued

About Us

Hapag-Lloyd is one of the world’s leading liner shipping companies, connecting businesses and people across more than 600 ports worldwide. With a fleet of over 300 modern container ships and a vessel capacity of 2.5 million TEU, we keep global trade moving reliably every day.

Our global network spans 139 countries, 396 offices and a growing portfolio of terminal and infrastructure investments. This scale enables us to deliver consistent, high-quality service across continents and to support our customers in even the most complex supply chains.

When you join us, you become part of more than 19,600 colleagues working across borders, functions and cultures, to not only deliver quality for our customers, but to create innovation and opportunities across roles, regions and perspectives.

We believe that every exploration is a chance to grow, and every port is a place to belong.

Your journey, our horizon.

  • Exciting challenges, real responsibility, and the opportunity to make your own ideas visible in a wide range of projects
  • Individual development through our Hapag-Lloyd LEARNING CAMPUS, international perspectives, and mentoring programs that genuinely advance your career
  • Attractive compensation (13 monthly salaries + vacation pay) as well as strong social benefits in a financially stable company
  • At least 28 days of vacation, flexible working hours, capital forming benefits, and a future oriented pension plan (MYPENSION)
  • A modern hybrid work model (3 days office / 2 days remote) and a workplace in a prime downtown location at Ballindamm
  • Mobility benefits such as subsidies for public transportation, as well as bicycle leasing
  • Comprehensive health and sports offerings (e.g., yoga, sailing, company doctor) plus EGYM Wellpass
  • A company restaurant with freshly prepared meals every day and a coffee bar with a wide selection

Please use our online tool for applying with us.

We ask staffing consultants and recruiting firms to refrain from sending us unsolicited profiles and CVs of potential candidates for this or other positions advertised on our website.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Hapag-Lloyd's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Hapag-Lloyd's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Hapag-Lloyd's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.