Senior Offensive Security Engineer (Azure & Entra ID)

About You You are an offensive security professional with hands-on expertise in Microsoft Entra ID, Azure privilege escalation, and identity-driven attack paths. You can start from an approved foothold, assess security boundaries, and demonstrate whether controls prevent access to privileged identities and sensitive resources. You approach production testing carefully, keeping actions controlled, reversible, and precisely documented. You can explain complex attack paths to cloud administrators and security stakeholders and distinguish demonstrated exploitation from posture-only observations. Note: This role operates under a contractor model for an initial period of 2 months , with the possibility of extension. You Bring to Applaudo the Following Competencies: Bachelor’s Degree in Computer Science, Cybersecurity, Software Engineering, or a related field is desired, or equivalent professional experience. End to end penetration testing methodology covering reconnaissance, exploitation, privilege escalation, lateral movement and reporting. Offensive testing of Microsoft Entra ID, including directory roles, PIM, app registrations, consent grants and Conditional Access behavior. Azure RBAC privilege escalation and abuse of managed identities and service principals. Token theft and abuse, covering access and refresh tokens, the IMDS managed identity endpoint, and the Graph and ARM APIs. Hands on experience with Azure offensive tooling such as ROADtools, AzureHound/BloodHound, AADInt