Senior Offensive Security Engineer

Astranis • San Francisco, CA

12d

About The Position

As a Senior Offensive Security Engineer, you will lead penetration testing and adversarial simulation efforts targeting our applications, cloud infrastructure, and corporate networks. You will emulate real-world attackers to identify weaknesses across the software and IT stack, and work closely with engineering and IT teams to improve our defenses. Your focus is offensive testing of application and enterprise systems.

Requirements

• 5+ years of hands-on offensive security experience (AppSec, cloud, or enterprise penetration testing).
• Demonstrated experience leading complex penetration tests for web apps, APIs, and cloud platforms.
• Strong proficiency in offensive tooling (Burp Suite, Nmap, Metasploit, proxy tools, etc.) and manual testing techniques.
• Familiarity with cloud-native attack vectors (AWS/Azure/GCP).
• Proficiency in at least one scripting or exploitation-oriented language (Python, Go, JavaScript, etc.).
• Strong analytical and problem-solving skills with an attacker’s mindset.
• Ability to explain complex technical vulnerabilities to a range of audiences.

Responsibilities

• Perform penetration tests of web apps, APIs, backend services, cloud infrastructure, and corporate networks.
• Conduct threat emulation exercises, red-team scenarios, and targeted attack simulations.
• Assess CI/CD pipelines, IAM configurations, and internal services for exploitable weaknesses.
• Lead offensive security initiatives and serve as the organization’s primary expert for AppSec and enterprise pentesting.
• Track emerging threats, techniques, and vulnerabilities relevant to cloud and enterprise environments.
• Develop custom exploits or proof-of-concepts as needed to validate findings.
• Work with development, infra, and IT teams to validate controls and guide effective remediation.
• Provide actionable risk assessments from an attacker’s perspective.
• Contribute offensive insights to secure system design guidance.
• Assist with code review and threat modeling for software components when offensive insights are needed.

Benefits

• All our positions offer a compensation package that includes equity and robust benefits.
• Base pay is a single component of Astranis's total rewards package, which may also include equity in the form of incentive stock options, high quality company-subsidized healthcare, disability and life insurance benefits, flexible PTO, 401(K) retirement, and free on-site catered meals.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed
• Number of Employees: 251-500 employees