Description

Modular Services is the managed services arm of CMS, one of the world’s largest law firms. From our delivery centres in Iași, Bacău and Bucharest we provide technology, cybersecurity, automation and business operations services to CMS member firms across Europe. Our SOC operates around the clock, protecting a global legal network, and we’re growing the team.

We are building an offensive-minded Security Operations capability, one that goes beyond reactive monitoring and actively hunts threats, tests defences, and develops detection strategies informed by real attacker techniques.

We are seeking a senior-level Cyber Security Specialist Engineer (OffSec) who combines deep networking expertise with hands-on offensive security experience and a strong detection mindset. This is a hands-on technical role with strategic impact, offering the opportunity to shape the direction of our offensive and research-driven cyber capability.

Responsibilities

• Conduct penetration testing, red team exercises, and adversary simulations against client environments.
• Develop attack scenarios based on real-world threat intelligence and emerging TTPs
• Perform proactive threat hunting aligned to MITRE ATT&CK framework
• Translate offensive findings into improved detection rules, SIEM use cases, and automated response playbooks

Requirements

• Minimum 3+ years of experience in security engineering, penetration testing, red team, or advanced SOC roles
• Hands-on experience with offensive security tools (e.g., Burp Suite, Metasploit, Cobalt Strike, BloodHound)
• Strong understanding of exploit development concepts, privilege escalation, and lateral movement
• Deep knowledge of TCP/IP, routing protocols (BGP, OSPF), VLANs, VPNs, and network segmentation strategies
• Experience with enterprise firewall platforms (Palo Alto, Fortinet, Cisco ASA)
• Practical experience with SIEM platforms (Sentinel, Splunk, QRadar) and detection rule development

Preferred Certifications

• OSCP, OSCE, GPEN, GXPN, or equivalent hands-on certifications
• CCNP Security or relevant networking certifications considered an advantage