Overview
Founded in 2007 by the creators of Kali Linux, OffSec (formerly known as Offensive Security) is the leading provider of continuous professional and workforce development, training, and education for cybersecurity practitioners. OffSec’s distinct pedagogy and practical, hands-on learning help organizations fill the infosec talent gap by training their teams on today’s most critical skills.
Become a part of our global presence and work from anywhere. With team members in over 40 countries, we believe in inspiring people of all backgrounds and communities. The OffSec team is composed of diverse, internationally published authors, conference speakers, and seasoned information technology professionals from both the private sector and governments worldwide.
Excited about our mission and what we do? Apply and join us!
Responsibilities
Qualifications
Working conditions
This role is a full-time salaried position. Work hours for this position are flexible and will be performed from a home office.
EEO
OffSec provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Apply for this job
Interested in building your career at OffSec? Get future opportunities sent straight to your email.
What’s the purpose of this document?
This document tells you how we will process your personal information when you apply for any roles or work with the Offensive Security group of companies ("roles").
Who are we?
These members of the Offensive Security group of companies are "data controllers".
Data Controllers and locations
Role Location
Data Controller
USA
Offensive Security Services, LLC located in the USA
Philippines
Offensive Security Certifications, Inc. located in the Philippines
Rest of World
OffSec Services Limited located in Gibraltar
In this privacy notice OffSec will refer to these legal entities as “OffSec”, “we” or “us” and for convenience, you can contact any of them by emailing
As data controller OffSec decides how we hold and use personal information about you. You are being sent a copy of this privacy notice because you are applying for a role with us (whether as an employee, worker or contractor). It makes you aware of how and why your personal data will be used. It provides you with certain information that must be provided under the General Data Protection Regulation (EU 2016 / 679) (GDPR).
OffSec will comply with data protection law and principles, so your data will be :
The information we hold about you
In connection with your application for a role, OffSec will collect, store, and use these categories of personal information about you :
We may also collect, store and use these types of sensitive personal information :
How is your personal information collected?
We collect personal information about candidates from the following sources :
How OffSec will use information about you
OffSec will use the personal information we collect about you to :
Our legal basis for processing your information
It is in our legitimate interests to process your personal information to decide whether to appoint you to a role and to decide whether to contract with you. If you are appointed to a role, it is also in our legitimate business interests to use your personal information for staff administration purposes.
Having received your application, OffSec will then process that information to decide whether you meet the basic requirements to be shortlisted for the role. If you do, OffSec will decide whether your application is strong enough to invite you for an interview. If we call you for an interview, OffSec will use the information you provide to us at the interview to decide whether to offer you the role. If we offer you the role, OffSec will then take up references and carry out background checks before confirming your appointment.
If you fail to provide personal information
If you fail to provide information which is necessary for us to consider your application (such as evidence of qualifications or work history), OffSec cannot process your application successfully. For example, if we require a credit check or references for this role and you fail to provide us with relevant details, OffSec cannot take your application further. This also applies if you supply information and then ask for it to be erased.
How we use sensitive personal information
OffSec will use your sensitive personal information in these ways :
Information about criminal convictions
We envisage that OffSec may process information about any criminal convictions.
OffSec operates in an industry that requires high trust and integrity and so we may ask you to disclose your criminal records history.
OffSec will collect information about criminal convictions if we would like to offer you the role (conditional on checks and any other conditions, such as references, being satisfactory). We may carry out a criminal records and other background check to satisfy ourselves there is nothing in your history which makes you unsuitable for the role.
Automated decision-making
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.
Data sharing
Why might you share my personal information with third parties?
OffSec will only share your personal information with these third parties to process your application : other members of our group of companies, third party service providers including Greenhouse, recruitment agencies, referees, background checking organisations and other service providers. All our third-party service providers and other entities in our group must take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and under our instructions.
Data security
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties with a business need-to-know it for the purpose of your application for a role. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
International data transfers
Your personal information will be stored in databases used by those at OffSec involved in considering your application for any role. OffSec uses manual files, spreadsheets, access databases and the like, to manage and store your personal information. OffSec also uses the cloud-based software platform provided by Greenhouse.
Your personal information will be kept by OffSec (either primarily or as a back-up system) in the USA or the Philippines. Your personal information will therefore be transferred to and accessible by OffSec and its group companies for the purposes outlined above in these countries. Your personal information may therefore be located in countries other than the country in which your personal information was originally collected. The laws in those countries may not provide the same level of data protection compared to the country in which you initially provided your information. Nevertheless, when we transfer your personal information to recipients in other countries, we will protect that information in compliance with law
How long will you use my information for?
If you are unsuccessful with your application, OffSec will retain your personal information for 12 months after we have communicated our decision to you. We retain your personal information for that period in case another role arises that you may be suitable for and so we can show that we have not discriminated against candidates and that we have conducted the recruitment exercise in a fair and transparent way. After this period, OffSec will securely destroy your personal information unless we determine that its in our legitimate interest to keep it for longer. In general, this will be because we think you may be suitable for another role with us and would like to be able to contact you again. You can request us to erase your data at any time.
If you are successful with your application, we will keep your personal information for the purpose of staff administration for so long as it’s in our legitimate interest to do so.
Rights of access, correction, erasure, and restriction
Your rights in connection with personal information
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request we transfer a copy of your personal information to another party, please contact
Questions?
If you have questions about this privacy notice or wish to contact us about anything related to it, please contact
Voluntary Self-Identification
For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.
As set forth in OffSec’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.
If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows :
Voluntary Self-Identification of Disability
Form CC-305
Page 1 of 1
OMB Control Number
Expires 04 / 30 / 2026
Voluntary Self-Identification of Disability
Form CC-305
Page 1 of 1
OMB Control Number Expires 04 / 30 / 2026
Why are you being asked to complete this form?
We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.
Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at
How do you know if you have a disability?
A disability is a condition that substantially limits one or more of your major life activities. If you have or have ever had such a condition, you are a person with a disability. Disabilities include, for example :
Disability Status Select...
PUBLIC BURDEN STATEMENT : According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.
#J-18808-Ljbffr
Sales • WorkFromHome, Oman