Offensive Security Engineers

Freddie Mac•McLean, VA

1d•$150,000 - $224,000

About The Position

Freddie Mac is seeking Offensive Security Engineers to help elevate the organization’s security posture through offensive security assessments, practical problem-solving, and the development of automation, tools, and methods that reduce risk. The role is part of the Information Security team, which tests the strength of the organization’s people, processes, and technology by simulating attacker objectives and actions. Candidates at all experience levels are encouraged to apply if they meet the required skills and qualifications. The engineer will contribute to a collaborative team focused on advanced offensive security, including designing and implementing AI-powered security tools, proactively addressing vulnerabilities, and promoting secure engineering practices across the organization. Applicants should bring expertise in one or more domains such as web applications, AI-powered business systems, or cloud environments. The position requires willingness to work East Coast hours.

Requirements

Ability to critically examine applications and identify, exploit, and remediate complex vulnerabilities.
Ability to create automation workflows that scale to enterprise environments.
Expertise in bypassing modern defensive controls and security measures to achieve assessment objectives.
Demonstrated proficiency in a chosen domain through public research, a personal blog, active projects, bug bounty work, or public disclosures.
Willingness to work East Coast hours.

Responsibilities

Execute sophisticated red team assessments across diverse attack surfaces.
Partner with internal stakeholders to define engagement scope and success criteria.
Translate complex technical findings into actionable business risk narratives.
Research, develop, and maintain offensive security tools and automation frameworks to enhance team capabilities and operational efficiency.
Design and implement AI-powered security tools.
Proactively address vulnerabilities and champion secure engineering practices across the organization.
Stay current with security trends and continuously improve team capabilities.